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Introduction 


Internet of things (IoT) envisages a deep sense of connectivity and communication 
between the living and nonliving things. Nowadays, the vision of IoT has expanded 
to connect everything from industrial equipment, to everyday objects, to living 
organisms such as plants, farm animals and people. To create a niche for nonliving 
things to react, respond and work autonomously as and when required and as per 
their role, position and location in the ecosystem to provide services to the user, IoT 
is developing rapidly in the industrial settings. 

Machine-to-machine communication and smart computing enhances the effi- 
ciency and helps minimize control cost of the industrial plants. 1oT integrates the 
physical world with the information world so that every entity/device works for the 
betterment and in coordination with the other to help save the most valued resour- 
ces and time. In this book, different approaches of the IoT and IoTPS (Internet of 
things, people and services) will be discussed. 


Objective of the book 


In the era before IoT, the World Wide Web, Internet, Web 2.0 and social media 
made people’s lives comfortable by providing web services and facility to access 
personal data irrespective of their location. Further, to save time and improve effi- 
ciency, there is a need for machine-to-machine communication, automation, smart 
computing and ubiquitous access to personal devices. This need gave birth to the 
phenomenon of IoT and further to the concept of IoTPS. This book aims at present- 
ing different aspects of IoT and IoTPS for smart computing, which comprises eight 
chapters. 


Organization of the book 


The book consists of eight chapters, and the brief description is as follows: 


Chapter 1 


Adaptive routing for emergency communication via MANET 

Mobile ad hoc networks have emerged in past years due to their wide applicability 
in the field of disaster recovery, police operations, crowd management, emergency 
and military operations such as battle fields. Furthermore, through the advent of 
sensor-enabled intelligent mobile devices, MANETs have become a crucial element 
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in the framework of IoT and smart city developments. In this chapter, a novel en- 
ergy-efficient counter-based scheme is introduced to address network challenges of 
MANET. 


Chapter 2 


Partial face recognition using image fusion 

The conventional way of taking the attendance of students is strenuous and also 
lengthy. The lecture normally prolongs the maintenance of the student’s atten- 
dance. This technique is ineffective, particularly if it is a lecture with a large num- 
ber of students. This chapter recommends a novel technique to acknowledge 
students face to speed up the procedures of attendance in the classroom. The image 
fusion with the averaging method is used to improve the effectiveness of the 
system. 


Chapter 3 


Threat analysis and attack modeling for machine-to-machine communication 
toward Internet of things 

The wide variety of 1oT applications demands a secure and efficient communication 
channel that resists against a variety of modern attacks and fulfills application re- 
quirement. There are various IoT threats and challenges that must be addressed to 
make a communication secure in IoT. This chapter gives detailed analysis of attacks 
with its behavioral modeling. Furthermore, the chapter proposes a novel security 
framework, which emphasizes on making secure communication layer with the 
help of trust management policies, distributed access control framework and pri- 
vacy-aware protocols. 


Chapter 4 


Security issues and trust management schemes in Internet of things 

IoT is an emerging research field in the network domain and is applied to almost all 
the applications that can change the people’s lives as smart. The number of security 
threats related to infrastructure, platform and application of IoT has been increased 
over the last few years. So, it is necessary to apply proper security solutions that 
ensure privacy and confidentiality of data. This chapter provides a detailed review 
of the security challenges and trust management techniques adopted for IoT to se- 
cure data in a cloud environment. 


Organization of the book — 3 


Chapter 5 


Users” privacy at online social netvvorks in Indian context: comprehensive 
multiaged group survey and discussion 

Novvadays, social media has become an important part of life. People around the 
globe use social media for random purposes. Hovvever, they do not often realize 
that they are attracting very serious incidents that can occur due to their posts. 
Online privacy is one of the crucial points to safeguard our personal information. 
To provide privacy-avvare online social netvvorks, it is important to knovv user”s 
avvareness about privacy. To achieve this, survey is conducted and from the analy- 
sis of survey the user”s awareness and requirements of privacy-avvare mechanism is 
presented in this chapter. 


Chapter 6 


Early prediction of breast cancer from mammogram images using classification 
methods: a comparison 

Nowadays, deaths of women in the age group of 15-54 are increasing due to malig- 
nant cells in breast. It is recognized as the main cause for the deaths of women. Day 
by day, the number of patients are increasing, because its important factors have 
not been identified yet, it is unable to prevent. So, the possibility of improvement is 
only the early diagnosis. This chapter provides survey of techniques that can help 
the prior detection of cancer using different classification methods such as support 
vector machine, decision tree, artificial neural network, logistic regression and ma- 
chine learning-neural network. 


Chapter 7 


Deep brain monitoring using implantable sensor and microcontroller: a review 

The consequent evolution in technologies is reaching toward the development of to- 
day’s world. Micro-electro-mechanical system technology is one of the emerging 
paradigms that signify continuous affection in health-care systems. In hospitals, it 
is very necessary to constantly examine the health condition, monitor movements 
and physiological parameters of patients. In this chapter, the deep brain monitoring 
using implantable sensors and microcontroller is used for treating number of neuro- 
logical disorders. 


4 — Introduction 


Chapter 8 


Enhancement path assured transfer protocol to transmit urgent data 

Sensor network is designed to provide monitoring services specifically for natural 
disaster. These natural disasters may affect the lives of human beings directly or 
indirectly. Congestion is a very important factor in wireless sensor network and also 
it reduces quality of services. It is very important to control the congestion as it may 
cause loss of packets or even more utilization of energy by sensor nodes. This chap- 
ter presents a protocol that checks for urgent data and gives priority to urgent data, 
so that this sensitive data will reach destination in time. 


Maniusha Deshmukh and Sangeeta Kakarvval 
1 Adaptive routing for emergency 
communication via MANET 


Abstract: In the past, mobile ad hoc netvvorks (MANET) have emerged due to their 
wide applicability in the field of disaster recovery, police operations, crowd man- 
agement, emergency and military operations such as battle fields. Furthermore, 
through the advent of sensor-enabled intelligent mobile devices, MANETs have 
become a crucial element in the framework of Internet of things (1oT) and smart 
city developments. MANET is a decentralized system consisting of mobile nodes 
capable of forming a self-configurable, infrastructure-less and continuously evolv- 
ing network. The lack of infrastructure empowers each mobile node to accomplish 
routing operation to confirm connectivity in MANET. Therefore, routing in MANET 
is an interesting operation. Most of the routing protocols used MANET as the basic 
broadcasting mechanism for flooding. In flooding, in order to find the route from 
source to destination, the packet is broadcasted to the neighboring nodes which 
in turn broadcast it to its neighboring nodes and this process sustains until the 
packet reaches to the destination. This neighborhood processing in MANET leads 
to broadcast storm problem. Traditional broadcast schemes have been presented 
to avoid broadcast storms by inhibiting some rebroadcasts. Another issue is the 
link failures caused by node mobility and energy exhaustion. In this chapter, we 
introduce a novel energy-efficient counter-based scheme and extend the scheme 
to reflect the mobility of node into an account to address these network challenges 
of MANET. In the proposed scheme, the decision of broadcasting is taken based 
on neighborhood, mobility and the energy of mobile nodes. The simulation results 
reveal that proposed schemes decrease the packet loss, the latency time and 
achieve lower energy consumption, better packet delivery and throughput when 
compared to ad hoc on-demand distance vector and hybrid counter-based broad- 
cast routing protocol. 


Keywords: MANET, CBB, emergency communications, broadcasting, energy-based 
schemes 


1.1 Introduction 


Recently, the wireless network has allured much concentration from researchers be- 
cause of the technological growth of wireless communication. The wireless network 
can be categorized into two types: infrastructured and infrastructure-less. In infra- 
structured wireless networks, the wireless mobile nodes communicate with access 
points that are attached to the fixed infrastructure. Nowadays, we already have 
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over a dozen widespread infrastructured wireless networks in use: global system 
for mobile communications, universal mobile telecommunications service, wireless 
local loop, wireless local area network and others. In infrastructure-less or ad 
hoc wireless network, the wireless mobile nodes function as routers to confirm 
connectivity among the mobile nodes. These wireless mobile nodes establish 
a spontaneous network to interchange information without relying on any preexis- 
tent fixed infra-infrastructure. Various infrastructure-less networks are available, 
which include mobile ad hoc networks (MANET), wireless sensor networks (WSN), 
vehicular ad hoc networks (VANET) and flying ad hoc networks (FANET) [l-3]. 
A WSN is an infrastructure-less network of physically scattered self-governing devi- 
ces using sensors to observe physical or environmental conditions. Furthermore, in 
the Internet of things (IoT), the WSNs become greatly popular [4]. VAHNET is an 
infrastructure-less network of smart vehicles set up with wireless devices [5]. 
FANET is an infrastructure-less network of a group of tiny flying vehicles equipped 
with camera, sensor and GPS [6]. The MANET is the most commonly used cost- 
effective infrastructure-less network. The wireless mobile nodes in MANET establish 
communication by forming a self-configurable and continuously evolving net- 
work [7]. The continuously changing and self-evolving feature of MANETs makes 
them most suitable for emergency communications. In emergency situations, dur- 
ing natural calamities such as earthquake, flood, tsunami and hurricanes, or man- 
made calamities such as terrorist attack and bomb blasts, the quick infrastructured 
network could be completely disrupted. Eventually, the rapid response and coordi- 
nated assistance become saturated and unmanageable. The MANET plays a vital 
role in the smooth conduction of rescue operations after the natural or man-made 
calamities [8]. 

Furthermore, through the advent of sensor-enabled smart mobile devices, 
MANETs have become a crucial element in the framework of smart city and IoT 
scenarios [9]. In addition, incorporation of multiple input-multiple output 
(MIMO) technology with MANET can enhance the performance of communica- 
tion process in hazardous surroundings [10]. The framework of IoT with the key- 
stone as an identity of wireless mobile computing devices has become the 
foundation for incorporating security methods such as authentication and au- 
thorization [11, 12]. The diverse applications of MANET received potential atten- 
tion toward efficient network creation in MANET. The continuously evolving and 
uncertain behavior of MANETs makes routing a more interesting facet to empha- 
size upon [13]. Broadcasting is the most fundamental operation used for routing 
in MANET. Flooding is the elementary operation used for broadcasting in 
MANET. In flooding, when a node gets the broadcast packet relay on the packet 
to all its neighbors; in return, these neighbors get a broadcast packet relay on 
the packet to its neighbors. This process of relaying on the packet sustains until 
all reachable nodes in the network get the packet. The packets flood the network 
gradually and hence cause redundant broadcasts, collisions and contention 
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problem in the network. Such a severe problem is collectively known as broad- 

cast storm problem (BSP) [14]. The fundamental solution on BSP is to minimize 

the number of redundant packets. There are several enhanced schemes that in- 
hibit some nodes from broadcasting the packets through the network with the 
aim to reduce the impact of BSP. The flooding is simple to implement but it suf- 
fers not only from BSP and also incurs high energy consumption in the network. 

The continuous mobility of the mobile nodes results in the varying network to- 
pologies of MANET that enables the mobile nodes to be either densely associated or 
sparsely associated. Accordingly, MANETs are classified as dense network and 
sparse network. In the dense network, nodes may run out of their energy quickly, 
which in turn cause partitioning of the network ensuring packet loss and link fail- 
ure. The network partitioning can be inhibited by considering the energy of the 
nodes into account while forwarding packets from source to destination. In sparse 
networks, shared coverage is lower since very few nodes act as intermediate nodes. 

If these intermediate nodes are highly mobile, then link failure can occur, which 

decreases packet delivery. Hence, node mobility must be considered to improve it. 
Inspired by addressing the issues of routing in MANET, we primarily bring the 

following contributions in this research study: 

1) We provide a classification of routing schemes that is used to deal with issues of 
flooding. Along with, a review of broadcast schemes is found in the literature. 

2) We introduce a method for the selection of next hop nodes in MANETs, which 
includes the following three aspects: number of packets received, neighbor- 
hood information of the nodes and residual energy of nodes. These three as- 
pects have been considered as decision-making aspects in the selection of next 
hop nodes in MANETs. 

3) We propose a novel energy-efficient counter-based broadcast (NEECBB) scheme 
for emergency communication in MANET. The algorithm reduces the energy 
consumption of mobile nodes, thereby increasing the lifetime of the network, 
which is of great importance in MANET. 

4) We extend the NEECBB scheme to reflect the mobility of node into account to 
enrich the performance of the NEECBB. 

5) We compare NEECBB and ENEECBB (extension of NEECBB) with HCBB (hybrid 
counter-based broadcast) and AODV (ad hoc on-demand distance vector), and 
the performance evaluation results show that the proposed algorithms perform 
better than other classical protocols in both energy consumption and packet de- 
livery ratio (PDR) for long-term emergency communications. 


The remainder of this chapter is organized as follows. Section 1.2 provides the 
general idea of related work about broadcast schemes. Section 1.3 proposes the 
NEECBB scheme and extension to NEECBB to enrich the performance of the sys- 
tem. Section 1.4 summarizes the performance evaluation through simulations. 
Section 1.5 concludes the chapter. 
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1.2 Background and related work 


In the past, a lot of research has been contributed to deal with the issues of flooding. 
Together with there are major contributions on the way to address the link failures 
caused by node energy exhaustion. These schemes can be categorized as follows: 

Neighbor knowledge-based schemes: The decision of broadcasting is taken 
based on local measures such as the number of neighbors and global measures 
such as the total number of nodes in the network. The basic idea is to reduce the 
broadcasts as the number of neighbors increases. Cartigny and Simplot [15] address 
that the forward probability is attuned to inverse proportion of the neighbor nodes 
and direct proportion to the efficiency parameter adjustable to topological parame- 
ters. Ejmaa et al. [16] described the average number of nodes that plays an impor- 
tant role in making broadcast decision replacing the total number of nodes of 
neighbor coverage-based probabilistic rebroadcast [17]. 

Distance-based schemes: The distance-based scheme can be categorized as 
the area-based schemes and the location-based schemes. The area-based schemes 
can further be categorized as density-based, received signal strength (RSS), 
Euclidean distance-based and hop count-based schemes. In the area-based 
schemes, the relative distance between the two nodes is used as the metric to make 
broadcast decision making. The density-based schemes [18] make use of distribu- 
tion of neighbors within nodes transmission range to measure the relative distance 
between the two nodes for making the broadcasting decision. The constant distribu- 
tion of neighbors is not the valid measure for making the broadcasting decision. 
The RSS-based schemes [19-21] use RSS as the metric to measure the distance be- 
tween the two nodes, which is used as a decision parameter for making broadcast 
decision making. The Euclidean distance-based schemes [19, 21] make use of posi- 
tioning system like a GPS to measure the distance between the two nodes, which 
decides the forward probability. In the hop count-based schemes [22], the number 
of hops is used as a distance metric to make a broadcasting decision. On the con- 
trary, in the location-based schemes, position information of the nodes is collected 
using the location service. The regional GOSSIP [23] aims at inhibiting the number 
of retransmissions by permitting some nodes in the specified areas connecting the 
source and the end nodes to retransmit the incoming messages. 

Counter-based scheme: The count of duplicate packets acknowledged at the 
node is used as a parameter for making the broadcasting decision. These schemes 
rely on the threshold in making broadcast decisions. In fixed counter-based broad- 
casting, a smaller threshold will cause broadcast saving and avoids the collision, 
thus minimizing the storm effect. In the sparse network, the nodes are dispersed far 
off and hence there remains less shared coverage; therefore, some nodes won’t get 
broadcast packets except if the threshold value is high to achieve reachability. In 
the dense network, the nodes are dispersed nearby to incur redundant transmis- 
sions; hence, the threshold value is set low to achieve broadcast saving. There 
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exists a trade-off between broadcast savings and reachability [14]. This leads to dy- 
namic adjustment of a threshold based on the network [24, 25]. These schemes dy- 
namically assign the counter threshold based on the information collected from the 
nodes neighborhood in order to achieve reachability and broadcast savings. 

Speed-based schemes: These schemes use the speed of nodes as the measure 
for broadcast decision making. In the network, if the mobility of nodes is high then 
it causes the link breakages which would affect the network lifetime. Hence, the 
idea is to eliminate many redundant broadcasts by the selection of low speed nodes 
as forwarder to rebroadcast the packets to discover a more stable path [26-29]. 

Energy-based schemes: In MANETs, mobile nodes are typically battery pow- 
ered. As each mobile node in MANET is responsible for routing packets, battery en- 
ergy should be efficiently utilized to avoid early power failure of the mobile nodes. 
Therefore, many research works have been carried out on the energy-efficient rout- 
ing in MANETs, thereby aiming to surpass the issues incurred by the finite power 
capacity of the battery of the nodes and thus extending the lifetime of nodes and 
networks. In this chapter, the energy-based routing protocols are reviewed based 
on the energy metric used for investigating the energy-efficient routing protocols. 
As discussed in [30], energy-based measures used by these classical energy-based 
routing protocols can be categorized into three categories: transmission power, re- 
maining energy capacity and combined energy measure. The major energy-based 
schemes discussed in this chapter are outlined in Table 1.1. 

The schemes in [30, 31] are focused to minimize energy consumption of the net- 
work by reducing the total transmission power. They proposed the minimum total 
transmission power routing (MTPR) scheme, which chooses a route with the lowest 
transmission power of the route by implementing the modified version of Dijkstra’s 
shortest path algorithm. Moreover, transmission power depends on the distance be- 
tween the nodes, and MTPR is likely to choose routes with further hops that bring 
on the rise in the number of nodes and end-to-end delay of the routing path. 
Despite the achievement of minimum energy consumption per packet, MTPR could 
cause node exhaustion if the same set of nodes works on multiple paths. The 
nodes’ energy exhaustion can disturb communication and even cause partitioning 
of network [32]. Hence, in the same study, the authors proposed the minimum bat- 
tery cost routing (MBCR) scheme, which selects a route with the maximum remain- 
ing energy capacity. This scheme aims at balancing the remaining energy capacity 
over the entire network. However, the MBCR scheme does not guarantee the mini- 
mum energy cost path. Moreover, MBCR might select a route containing nodes with 
minimum remaining battery capacity. Therefore, to evade the route with nodes pos- 
sessing minimum remaining battery capacity among all the nodes in all possible 
routes, the battery capacity of each node is considered to construct the route. 
Consequently, the authors proposed the improved MBCR scheme known as 
min-max battery cost routing (MMBCR) scheme, which always selects the route 
with the maximum bottleneck remaining battery capacity. However, the MMBCR 
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scheme still does not promise minimum total transmission energy consumption per 
packet over a selected route. To achieve minimum energy consumption and fair re- 
maining energy over the network, the authors proposed the conditional max-min 
battery capacity (i.e., above a threshold), then, they selected a route with minimum 
total transmission power from all possible discovered routes. Minimizing the total 
power required to transmit the packets for each connection leads to a significant 
reduction in the relaying load for most nodes and the extension of the lifetime of 
nodes. Moreover, CMMBCR avoids the routes with all the nodes possessing least re- 
maining battery capacity to enlarge lifetime capacity routing (CMMBCR, conditional 
max-min battery capacity routing) scheme. The CMMBCR combines the MTPR and 
the MMBCR to achieve the goals. The CMMBCR scheme first discovers routes with 
all the nodes possessing sufficient remaining battery of these nodes. 

Almost in most of the classical routing algorithms, the number of nodes is used 
as a metric to make broadcast decision making during route discovery, though this 
is not significant in ad hoc networks as it has other parameters to include in the 
optimized route discovery. Aside from the classical energy-based routing protocols, 
an energy-saving ad hoc on-demand distance vector (ESAODV) in [33] is proposed 
for routing in MANETs, which found a new parameter as energy comparison thresh- 
old induced from cumulative sum of remaining energy information of neighboring 
nodes and allows each intermediate nodes to broadcast route request packets if its 
remaining energy is larger than the energy comparison threshold. However, 
ESAODV does not promise significant route discovery under light load networks. 

Dhurandher et al. [34] explored the energy-efficient ad hoc on-demand routing 
(EEAODR) algorithm, which aim at balancing the energy capacity of nodes over the 
network. An EEAODR makes use of remaining battery capacity, packet size and the 
distance between the nodes as routing metric and decides an optimized path, 
among all the discovered paths for efficient transmission in the network. 

The alternate link maximum energy level (ALMEL) [35] algorithm chooses 
a maximum energy path for route selection to increase the network lifetime. 
During route selection, the nodes with the least residual energy are inhibited 
from broadcasting the packets. It allows intermediate nodes to update energy in- 
formation in the route request packet. If the new path is evolved with better- 
accumulated energy sum, the destination node will insert newly evolved infor- 
mation into its route table. If there is a broken path, the source reinitiates route 
discovery and chooses an alternative path from the routing table. 

The progressive energy-efficient routing (PEER) protocol [36] primarily focuses 
on the quick searching of route closer to the minimum energy route during the 
route discovery phase, which may lead to high end-to-end energy consumption 
than that of the minimum energy route. Ultimately, PEER includes a route mainte- 
nance phase to adjust the route to the energy-efficient route in view of further 
changes in topology and channel quickly. 
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These schemes are introduced in the literature to offer an optimized solution to 
broadcasting and to extend networks lifetime by utilizing the energy consumption 
of the network. 


1.3 Novel energy-efficient counter-based scheme 


The major existing schemes uses hop count, distance and neighbor knowledge in- 
formation as the classical routing metrics and remaining energy as energy metric to 
achieve minimum energy. The NEECBB aims at minimizing energy consumption of 
network by the use of packet counter, neighbor knowledge information and remain- 
ing energy metric. In network, there exist some nodes that hold less energy and 
some that hold high energy. In dense network, nodes may run out causing link fail- 
ure. Therefore, NEECBB favors the nodes with more remaining energy for broadcast 
process. 

The different phases of NEECBB scheme are highlighted as follows: 
Initialization phase 

Computation phase 

Characterization phase 

Broadcast decision-making phase 


ƏD pS 


Initialization phase: Upon receiving a packet at node (n), each node exchanges 
HELLO packets with each neighbor nodes to get one-hop neighboring nodes N(nbg). 
It does not immediately broadcast the packet to its neighbors; instead, it waits by ini- 
tializing the timer to random delay. Next, to keep track of duplicate packets, it initial- 
izes a packet counter (c). Subsequently, sets up the initial energy E(Init) of each node 
in the network and the energy threshold (E(Th)) before broadcast starts. 

Computation phase: At the start, it computes the average neighboring nodes 
N(avg) at a node (n) in the network of an area, A(M) and the total number of nodes 
(N) with transmission radius (R) using the following equation: 


N x zr xR? 


N(avg) = A(M) 


(1.1) 
Aftervvard, it computes the remaining energy E(Rem) as the difference of the initial 
energy of node E(Init) and the current energy of the mobile node E(N). 
Characterization phase: This phase evolves the two broadcast decision-making 
parameters, namely, neighborhood density N(d) and the energy efficiency N(e) of the 
mobile node. Initially, the algorithm characterizes a mobile node as sparse if the num- 
ber of neighboring nodes N(nbg) is less than the average number of nodes N(avg) in 
the network, and characterizes the mobile node as dense otherwise. Afterward, it de- 
termines the energy efficiency N(e) of the mobile node. The algorithm characterizes 
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a mobile node as strong if the energy of mobile node E(N) exceeds the energy thresh- 
old E(Th) and as weak otherwise. 

Broadcast decision-making phase: In this phase, NEECBB incorporates prior 
articulation of chances for the broadcast process before finding the optimal route. If 
a node evolves as a strong dense node, then the high dense threshold value is as- 
signed to counter threshold to get more chances for broadcasting. On the contrary, 
if a node evolves as a strong-vveak node, then counter threshold is set to low dense 
threshold value to get less chance for broadcasting. It works similarly for the sparse 
node and assigns high sparse threshold value and low sparse threshold value for 
a strong sparse node and weak sparse node, respectively, to decide chances for the 
broadcast process. Finally, the packet counter is compared with the rebroadcast 
threshold in order to find an optimal path. 


1.3.1 NEECBB: the proposed protocol 


This section explains the pseudocode of NEECBB protocol in detail in Algorithm 1.1. 
The NEECBB protocol reduces the energy consumption of mobile nodes, thereby in- 
creasing the performance of the network, which is of great importance in MANET. 


1.3.2 Extension of NEECBB 


Here, we extend the proposed NEECBB to include mobility of the mobile nodes to 
make more accurate decisions during route discovery. It considers the three main 
decision parameters that broadcast decision making: the neighborhood density 
N(d), stability N(s) and energy efficiency N(e) in order to address the issues of 
MANET. These parameters are weighted to reflect their relative importance in the 
decision-making process. In this scheme, each time a node receives a broadcast 
packet it does not broadcast the packet immediately. It waits for random assess- 
ment time and initializes the packet counter to reduce the storm effect. Then it 
starts characterization of the network, which takes place in three different levels 
and forms the basis for incorporation of the preferences of the broadcast process. 
The first level broadly classifies the network as sparse or dense based on neighbor- 
hood density (d). If it classifies network as dense then n is set to 1, otherwise 0. 
The second level is used to decide preferences based on energy-efficient routes that 
use energy (e) of the mobile nodes. The third level decides preferences to form sta- 
ble routes that use speed (e) of the mobile nodes. The weights of these parameters 
vary with neighborhood density. The ENEECBB constructs a rebroadcast threshold 
function to aggregate the multiple decision parameters into a single parameter, 
which decides the preferences of the broadcast process. The rebroadcast threshold 
function (f) is defined as follows: 
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Algorithm 1.1: Pseudocode of NEECBB protocol. 


1. Initialization : 

2. N — Number of Nodes 

3. R=250m 

4. AM) = 1000 x 1000 

5. E(Init) = 100 Joules 

6. lnitialize(C) 

7. Call SendHelloQ 

8. Event: On reception of packet at node (n,) 
9. Update) 

10. Finds N(nbg) € neighbour_list() 
11. Finds N(avg) = 2. R. 


12. FindsE(N) € Energy() 
13. “If N(nbg) > N(avg) then N(d) = Dense 


14. Else N(d) = Sparse 

15. LEnd 

16. —If E(N) > E(Th) then N(e) = Strong 

17. Else N(e) = Weak 

18. End 

19. -If N(d) = Dense && N(e) = Strong then C(Th) = High Dense 

20. Else if N(d) = Dense && N(e) = Weak then C(Th) = Low_Dense 

21. Else if N(d) = Sparse && N(e) = Strong then C(Th) = High Sparse 
22. Else if N(d) = Sparse && N(e) = Weak then C(Th) = Low_Sparse 
23. İ End 

24. If C c C(Th) then Broadcast (n,) 

25. Else 

26. | Drop (n) 

27. LEnd. 

28. Exit. 


f =c1.N(d) + c2.N(s) + c3.N(e) (1.2) 
such that N(d) =0 or 1&N(s), N(e) œ Nid 


where c1,c2 and c3 are the performance values of respective decision parameters. 
Finally, if the packet counter does not reach the rebroadcast threshold, then the 
packet is transmitted; otherwise, the packet is dropped. The flow diagram of 
ENEECBB protocol is described in detail as shown in Figure 1.1. 
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Phase 1: Initialization 


Read simulation 
parameters 


General Neighbor. list 
by Call SendHello() 


Phase 3: Characterization 


Phase 2: Computation 


Evaluation of Neighbor- 
hood density 


| | 


L. 1 ? 


Evaluation of energy 
efficiency 


Neighbor knovvledge 
discovery 


If 
[N(nbg)]>N(avg) 


Finds nighbor nodes of 
mobile node [N(nbg)] 


Finds average nighboring 
nodes of network [N (avg)] 


; 


Miscellaneous knowledge 
discovery 


Finds energy of receiving 
mobile node [E(N)] 


+ 


Evaluation of stability 


Finds speed of receiving 
mobile node [S(N)] 


Phase 4: Broadcast 
decision making 


Assigns threshold 
Takes broadcast decision 


[ N(s)=Stable | | N(s)=Unstable 


Figure 1.1: Flow diagram of ENEECBB protocol. 


1.4 Performance evaluation 


This section describes comparative protocols, simulation setup and performance 
measures used for evaluation of the proposed protocols. 
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1.4.1 Comparative protocols 


In order to evaluate the effectiveness of the proposed scheme, the NEECBB and ex- 
tended NEECBB are compared with the standard AODV protocol [37] and the well- 
known HCBB scheme [38]. 


AODV protocol 


AODV is an on-demand distance vector routing protocol used for communication es- 
tablishment among the nodes with no paths. AODV uses flooding as a basic mecha- 
nism for route discovery. It uses neighborhood information in order to find the route 
from source to end node. This neighborhood processing in MANET leads to BSP. The 
purpose of the proposed schemes is to reduce the impact of BSP; hence, AODV is con- 
sidered as a good candidate for comparison with NEECBB and ENEECBB. 


HCBB protocol 


The HCBB is the hybrid scheme of the counter-based and neighbor knowledge- 

based schemes, which dynamically allocate the counter threshold dependent on 

the neighborhood information. HCBB provides broadcast savings achieving guaran- 

teed transmission. Some major contributions attained by HCBB on the way to ad- 

dress MANET issues are as follows: 

1. HCBB provides an efficient route discovery technique through the neighbor- 
hood propagation, which involves reduction in the redundant broadcasts. 

2. Broadcasts are constrained on the basis of local measures such as the degree of 
the node (number of neighbors) and global measures such as the average num- 
ber of nodes in the network. 


1.4.2 Simulation setup 


The performance of the proposed protocols for MANET is evaluated in network sim- 
ulator (ns-2). The simulation parameters used for the evaluation of proposed proto- 
cols are listed in Table 1.2. The constant transmission range of the network is 250 m. 
The MAC layer scheme follows the IEEE 802.11 MAC specification. Each mobile node 
in MANET follows the random waypoint model to decide the movement pattern of 
them. The two-ray ground reflection model used for experimenting the routing pro- 
tocols performs propagation to consider both the direct path and a ground reflec- 
tion path. The omnidirectional antenna is used to configure the transceiver of 
MANET. The size of the network has been taken as 1,000 x 1,000. The simulation 
experiment runs for 225 ms over the varied network densities (50, 75, 100, 125). 
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Table 1.2: Simulation parameters. 


30 E ea 


Parameter Value 

Network area 1,000 x 1,000 

Transmission range 250m 

Simulation time 225 ms 

Number of nodes 50, 75, 100, 125 

Traffic pattern CBR(UDP) 

Receiving power 1.0 

Transmission power 2.0 

Routing protocol AODV, HCBB, NEECBB, ENEECBB 
MAC protocol IEEE 802.11 

Mobility model Random waypoint mobility model 
Propagation model Two-ray ground 

Antenna Omnidirectional 


1.4.3 Performance measures 


The following measures are evaluated to measure the effectiveness of NEECBB and 
ENEECBB over AODV and HCBB. The total consumed energy, average consumed en- 
ergy, delay, packet dropping, PDR and throughput obtained through simulation 
over varying network densities of 50, 75, 100, 125 for our proposed schemes, HCBB 
and AODV, are tabulated in Table 1.3. 


Total consumed energy: This defines the difference between the current and 
initial energies of all nodes during the simulation. This measure accounts for 
energy spent in transmission and reception of the packets. The average con- 
sumed energy provides accurate information about the energy consumed by 
the nodes involved in packet transmissions and receptions. 

Delay: This represents the total time required by a packet to move from the 
source to the destination. The link failure in networks incurs delay in networks 
as more time spent on route maintenance of the network. 

Packet dropping: The dropping of data packets occurs if the data packets travel- 
ing through network fail to reach the destination. The packets get lost if the net- 
work is congested. The reduction in retransmission has a substantial impact on 
the packet drops in the network. 

PDR: This represents the number of data packets that are successfully delivered 
to the destination. This measure is computed as the ratio of the number of re- 
ceived data packets by each destination to the number of data packets sent 
from each source. 

Throughput: This defines the number of bytes arrived at the destination over 
a period of time. The higher the throughput value means higher the perfor- 
mance of the network. 
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Table 1.3: Readings obtained through simulations over varied network densities of 50, 75, 100, 125. 


S.no. Performance Schemes Total number of nodes 
ML 50 75 100 125 
1. Total AODV 1,610.6 2,395.4 4,046.54 5,853.61 
consumed 
HCBB 1,287.84 1,692.38 3,287.93 3,857.49 
energy (J) 
NEECBB 1,115.94 1,722.39 3,192.64 3,474.46 
ENEECBB 1,610.6 2,395.4 4,046.54 5,853.61 
2. Average AODV 32.2119 31.9387 40.4654 46.8289 
consumed 
HCBB 25.7567 22.5651 32.8793 30.8599 
energy (J) 
NEECBB 22.3188 22.9652 31.9264 27.7957 
ENEECBB 26.1902 20.6683 30.5701 28.9164 
3. Delay (s) AODV 0.280583 0.0784849 0.580178 0.322705 
HCBB 0.455561 0.0869934 0.51905 0.365155 
NEECBB 0.186596 0.0467458 0.273937 0.32558 
ENEECBB 0.296194 0.0600749 0.406911 0.416007 
4. Packet AODV 580 111 866 466 
droppings 
pee HCBB 183 4 110 70 
(packets) 
NEECBB 22 0 37 13 
ENEECBB 15 3 30 37 
5. Packet AODV 78.0967 95.7811 63.7657 82.5468 
delivery ratio 
(%) HCBB 94.4579 99.8789 96.6687 97.8801 
NEECBB 99.3337 100 98.8795 99.6063 
ENEECBB 99.5457 99.9091 99.0915 98.8795 
6. Throughput AODV 99,264 132,666 87,085 110,879 
(bps) 
HCBB 138,622 146,578 141,867 143,644 
NEECBB 145,778 146,756 145,111 146,178 
ENEECBB 146,089 146,622 145,422 145,111 
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1.4.4 Simulation results 


This section describes the simulation campaign to exploit the performance of the 
proposed protocol against HCBB and AODV. Figures 1.2 and 1.3 show an effect of 
total energy and the average energy consumed by the mobile nodes over varied 
node densities, respectively. It shows that the energy consumption increases from 
low-density network to high-density network for all the protocols considered in the 
simulation scenario. 


Number of nodes versus total consumed energy 


Total consumed energy (J) 


Number of nodes 


= AODV = HCBB = NEECBB m ENEECBB 


Figure 1.2: Total consumed energy over varied node densities. 


The NEECBB schemes reduced the total energy consumption by more than 31% 
compared to the AODV routing protocol and ENEECBB maintains approximately 
the same consumed energy. The proposed schemes performed better than HCBB 
by reduction of the total energy consumption by approximate 6% more. As shown 
in Figure 1.3, the ENEECBB performed better than NEECBB in the low-density net- 
work. Certainly, both the proposed schemes outperformed best as both schemes 
aimed at inhibiting some nodes from broadcasting to cause fewer packets and less 
energy consumed by the selected nodes crossing the network. 

Figure 1.4 presents the graph of delay over varied network densities. The 
NEECBB reduced more than 34% of the delay, and ENEECBB more than 6%, com- 
pared to the AODV routing protocol. Similarly, NEECBB and ENEECBB, when com- 
pared with HCBB, reduced more than 41% and 17% of the delay, respectively. While 
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Number of nodes versus average consumed energy 
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Figure 1.3: Average consumed energy over varied node densities. 


Number of nodesvs delay 
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Figure 1.4: Delay over varied node densities. 


the number of retransmissions is reduced in our proposed schemes, the overall rout- 
ing process will speed up. Indeed, the result statistics reveals that the delay is in- 
creased in ENEECBB by an additional 41% than NEECBB. The ENEECBB does not 
perform well due to increased overhead of finding optimal stable network. Figure 1.5 
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Number of nodes vs packet dropping 


Packet dropping (packets) 
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Figure 1.5: Packet droppings over varied node densities. 


shows packet droppings over varied network densities. The reduced number of nodes 
for broadcasting of packets have significant impact on the packet droppings in the 
network. The NEECBB reduced more than 81% of the delay, and ENEECBB more than 
47%, compared to the HCBB scheme. The proposed schemes outperform AODV by 
the reduction of packet dropping by more than 90%. Basically, the main objective of 
the proposed schemes is to adapt to dynamic changes of the mobile nodes; however, 
they achieve to uphold the PDR compared to HCBB and achieve significant enhance- 
ment compared to AODV. The greater is the PDR the better is the performance of the 
proposed scheme. Figure 1.6 illustrates a graph of PDR over varied network densities. 
As shown in Figure 1.6, the PDR was changing over varied network densities, more 
specifically in varied network configurations for the AODV protocol. However, for the 
proposed schemes, the PDR was constant due to the adaptation to network changes 
and reduction to packet loss. The proposed schemes caused considerable incremental 
growth of 24% in the PDR compared with the AODV routing protocol and least incre- 
mental growth of 2% in PDR compared with the HCBB scheme. 

Figure 1.7 shows the impact of the throughput over varied network densities. 
Delay is the component that affects the throughput of the network. The low-latency 
network incurs small delays and achieves high throughput. The high-latency net- 
work incurs high delays and achieves low throughput However, as shown in 
Figure 1.7, throughput was changing over varied network densities in AODV proto- 
col. For proposed schemes, the inverse was true because of choice of the more sta- 
ble network for the broadcasting process. The proposed schemes raised the 
throughput by more than 35% compared to the AODV routing protocol and caused 
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Number of nodes vs packet delivery ratio 
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Figure 1.6: Packet delivery ratio over varied node densities. 
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Figure 1.7: Throughput over varied node densities. 


a raise of 2% more of the throughput when compared with HCBB protocol. The pro- 
posed schemes performed better than HCBB by reduction of the total energy con- 
sumption by approximate 6% more. 
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1.5 Conclusion 


This study addresses the issues of MANETs. To address this, we proposed an 
NEECBB scheme for emergency communication via MANET. The NEECBB aimed at 
condensing the energy consumption of mobile nodes, thereby increasing the life- 
time of the network. We introduced a method for the selection of next hop nodes in 
MANETs, which includes the following three aspects: the number of packets re- 
ceived, neighborhood information of the nodes and the residual energy of nodes. 
We extended the NEECBB scheme to reflect the mobility of the node into account to 
enhance the performance of the NEEECBB. Both the proposed schemes outperform 
over the HCBB and standard AODV protocol. The NEECBB schemes reduced the 
total energy consumption by more than 31% compared to the AODV routing proto- 
col, and ENEECBB maintains approximately the same consumed energy. The pro- 
posed schemes performed better than HCBB by reduction of the total energy 
consumption by approximately 6% more. The proposed schemes not only ad- 
dressed energy consumption of the network rather than achieved low latency and 
packet droppings by enhancing the packet delivery and throughput of the network. 
The results of simulation revealed that proposed schemes decrease the packet loss, 
the latency time, and achieves lower energy consumption, better packet delivery 
and throughput in the network. 


Nomenclature 

ALMEL Alternate link maximum energy level 

AODV Ad hoc on-demand distance vector 

BSP Broadcast storm problem 

CMMBCR Conditional max-min battery capacity routing 
EEAODR Energy-efficient ad hoc on-demand routing 
ENEECBB Extended novel energy-efficient counter-based broadcast 
ESAODV Energy-saving ad hoc on-demand distance vector 
FANET Flying ad hoc network 

HCBB Hybrid counter-based broadcast 

MAC Medium access control 

MANET Mobile ad hoc networks 

MBCR Minimum battery cost routing 

MMBCR Min-max battery cost routing 

MTPR Minimum total transmission power routing 
NEECBB Novel energy-efficient counter-based broadcast 
OLSR Optimized link state routing 

PEER Progressive energy-efficient routing 

RREQ Route request 

RSS Received signal strength 

VANET Vehicular ad hoc network 


WSN Wireless sensor network 
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2 Partial face recognition using image 
fusion 


Abstract: Several biometric partial face recognition researches have been performed 
by many scientists. In this chapter, a novel technique has been recommended, 
which acknowledges students face to speed up the attendance procedures in 
a classroom. Students’ partial pictures have been used to prepare the image set, 
and preprocessed different partial faces to gray-level images. Initially, the tech- 
nique like discrete wavelet transform has been used to obtain local features. 
Afterward, the effectiveness of the approach has been improved by employing 
image fusion with the averaging method. The fusion technique along with the cor- 
relation technique was executed to the contrast between the fused images, and the 
test images were selected from the entire image set. Results revealed practically 
90% of the instances that were matched. The acceptance rate on an overall analysis 
has been found to prevail between 86.67% and 87.5%. 


Keywords: Image fusion , 2D correlation , binning , partial face , Internet of things 


2.1 Introduction 


The conventional way of taking the presence of students is strenuous and also 
lengthy. The lecture normally prolongs it, upkeeping the student’s attendance. This 
technique is ineffective, particularly if it is a lecture with a large number of stu- 
dents. It also triggers a great deal of disorder and hindrance when an examination 
is hosted. Furthermore, the attendance sheet is subjected to damage and also loss 
while being handed down between different students and teachers. In some cases, 
the lecturers have the tendency to call a couple of students’ full name randomly, 
which is an unfair student assessment procedure either. Eventually, these atten- 
dance records are used by the lecturers to keep track of the students’ attendance 
rates. This process could be comfortable and useful with a small number of stu- 
dents; however, dealing with the records of a large number of students often leads 
to human error. 

Therefore, to prevent this mistake, computerized attendance recording system 
is offered to every student thus saving time, initiative and reduces disruptions. 
These particular systems might consist of the utilization of biometrics like finger- 
mark, eye acknowledgment, retinal search and articulate acceptance. These kinds 
of systems are conclusively established in the current years; nevertheless, this is 
actually unpleasant and expense required when it comes to implementation on 
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huge scale gets increased significantly. Biometric iris acknowledgment uses tem- 
plate acceptance methods based on high-resolution and a distortion-free image of 
the irises from the human eyes. Iris is an organ, whose structure remains steady 
all throughout life. Therefore, this functions as an incredibly great biometric 
when it comes to developing identification of an individual. Speech identification 
is an one more individual recognition system through computer software applica- 
tion as well as an equipment tool along with the capability to decipher the indi- 
vidual’s speech. In the event of this, we observe that an individual’s speech could 
be rapidly captured and also utilized when it comes to an unexpected for any type 
of electronic device. This possesses low accuracy. A health problem like a cold 
could alter an individual’s speech, making complete recognition challenging or 
difficult. To conquer these kinds of problems, the biometric function such as face 
identification could be utilized, which includes the stages like image acquisition, 
feature extraction, face classification [1] and also eventually marking the atten- 
dance. Likewise, some of the significant advantages that face recognition modern 
technology companies provide are the time participation monitoring, which ena- 
bles leaving out the amount of time theft among the employees and also the paid 
hours start from this particular minute until the same check-out process. It is es- 
sential when it comes to entrepreneurs to rely on their employees, however, to 
watch on all of them. Face recognition describes a part of computer science which 
can determine individuals’ facial expressions inside digital images. Face recogni- 
tion technology may start through looking for human eyes. It could then utilize 
a genetic algorithm to spot face areas consisting of eyebrows, the mouth, nose, 
nostrils and also the iris. This particular technology is being used more often in 
digital photography since a way to assist cameras autofocus on individuals’ faces. 
This system complements a person’s face immediately against a data source of 
photos to develop the identity. Face detecting systems could utilize algorithms to 
forecast age, sex and also various other elements to serve up appropriate adver- 
tisements, and the acknowledgment explains a biometric innovation which heads 
way beyond identifying when a human face exists. The suggested work primarily 
handles the students face recognition within the class. Often, this similar proce- 
dure works using a computer application that catches a digital picture of an indi- 
vidual’s face via video frame and also compares it to images in a database of 
stored records. Nevertheless, when it comes to the front or full face acknowledg- 
ment algorithm, there is a drawback that students in a class need to arrive near 
the electronic camera and provide their attention to obtain correct outcomes. It is 
because the students in a class do not regularly sit appropriately. Often it fails 
when the students are not in their frontal face and remain in a side face, that is, 
either left sided or right sided, the camera fails to determine the image of those 
students. The relative angle of the target faces affects the recognition score excep- 
tionally. So we need to enroll faces in the recognition software; typically, several 
positions are used. The more direct the image and the higher its resolution, the 
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higher the score of any resulting matches. Finally, the subject must be holding 
a neutral expression and managing these specifications helps reduce variation be- 
tween any two images. 

Inside this particular succeeding study, in Section 2.3 we have talked about cur- 
rent research in biometric face recognition as well as its restrictions. The partial 
face recognition framework consisting of many collective actions are discussed in 
Section 2.4. Here, we have highlighted sequential phases of work in brief. The out- 
come of identification of the faces of students was compared in Section 2.5 and con- 
firms the value of image fusion technique concerning student face recognition. 
Lastly, in Section 2.6, we have wrapped up study with limitation and potential 
scope. 


2.2 Related work 


Liao et al. [2] suggested a method that possesses absolutely no demand of face posi- 
tioning and also eyeball coordinates. The analysis of the face images starts with iden- 
tifying the descriptor via Multi-Keypoint Descriptors (MKD). By doing this, any probe 
face image, alternative or partial, could be sparsely represented through 
a comprehensive dictionary of gallery descriptors. Here, Gabor ternary pattern (GTP) 
produces a distinct keypoint descriptor for robust and biased face recognition. These 
experimental outcomes are stated on four public domain face data sources under 
each of the open-set recognition and verification scenarios. They dealt with the issue 
of identifying a face from its partial image and suggested an alignment-free approach 
called Multi-Key point Descriptors-Sparse Representation-based Classification (MKD- 
SRC). Their approach stands for every face image with a set of keypoint descriptors 
and constructs a large dictionary from all the gallery descriptors. By doing this de- 
scriptor of a partial probe image could be sparsely stood for by the dictionary, and 
the identity of the probe could be presumed appropriately. 

Smeets et al. [3] offered the meshSIFT algorithm and also its utilization of 3D 
face acknowledgment. This approach consists of the neighborhood procedure, and 
every salient factor is explained in a feature vector, including concatenated histo- 
grams of shape indices and also slant angles. Afterwards, the feature vectors of two 
3D facial surface areas are dependably fit through contrasting the angles in 
a feature space. As a result, the algorithm is robust to expression variations, miss- 
ing information as well as outliers. It also showed that the amount of matching 
meshSIFT features is a reliable measure for expression-invariant face acknowledg- 
ment. It reveals the recognition rate of 93.7% and 89.6% for standard data sources, 
specifically. 

Ding et al. [4] operated on recorded face images inside difficult scenarios that typi- 
cally include essential position variant, which significantly deteriorates the efficiency 
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of algorithms developed to identify frontal faces. Here, the approach is of a novel face 
recognition framevvork that is efficient in dealing vvith the full variety of position var- 
iants inside 90 degrees. Finally, face matching vvas carried out in patch level rather 
than the holistic level. Extensive and also methodical testing on multi-PIE, CMU-PIE 
http://www.cs.cmu.edu/afs/cs/project/PIE/MultiPie/Multi-Pie/Home.html (last access 
date: 07.06.2019) and also The Facial Recognition Technology (FERET) database re- 
vealed that the proposed technique regularly surpasses single task-based standards in 
addition to cutting-edge techniques for the posed problem. Patch Based Partial 
Representation (PBPR) could be used to face images in the arbitrary position, which is 
a considerable benefit over presenting methods. 

Lei et al. [5] suggested 3D face recognition with the accessibility of just par- 
tial information and also single training sampling is an extremely challenging 
task. This study offered an effective 3D face recognition technique to deal with 
this challenge. It examines face along with a collection of regional keypoint- 
based multiple triangle statistics (KMTS) that is robust to partial face informa- 
tion, large facial expressions as well as position variants. The suggested method 
stands for a 3D confront with a collection of regional geometric descriptors 
called KMTS. The suggested descriptor allows robust 3D PFR with inconsistent 
data, barricades and data corruptions. Finally, a durable prior classification da- 
tabase on the suggested local descriptor was the need for resolving the single 
sample issue. 

Best-Rowden et al. [6] constructed an analytical system regarding a pair of mug- 
shot data sources, which are the most comprehensive facial aging data sources ex- 
amined to this day concerning several topics. The longitudinal evaluation revealed 
that in spite of reducing initial scores, 99% of topics could still be identified in 
0.01% fixed false accept rates. In future, they would attempt to monitor an accuracy 
along with a global threshold. 

Lahasan et al. [7] suggested optimized symmetric partial facegraphs that were 
a memetic-based framework to determine faces that are prone to unfavorable cir- 
cumstances. Those situations could be a facial feeling, occlusions and lighting 
changes. This study combined an enhanced harmony search algorithm and 
a sensible single particle optimizer to have the benefit of their global as well as re- 
gional search aptitudes. These features further functioned as the foundation so as 
to without effort design the partial facegraph. 

Fu et al. [8] mentioned the effectiveness of the sparse representation classifier 
that might perform classification through assessing which class results in the mini- 
mal representation inaccuracy. For that reason, they had created virtual samples 
through making use of original training samples along with the aim of enhancing 
the variety of training samples. The respective representation scores utilized 
weighted score-level fusion of the virtual samples, and also the original training 
samples are merged with each other to acquire the finished classification outcomes 
with an accuracy of 76.61. 
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2.3 Methodology 


Image fusion is a process that is used to gather maximum useful information from 
various images and converts the inclusion of all images into a single image (some- 
times more than one image). This individual fused image is more accurate and con- 
tains all the useful information from different images [9]. The image fusion method 
is used for reducing the data amount as well as this method is also used for con- 
structing much more appropriate images that are easily understandable by human 
beings as well as machines. Moreover, it can be said that image fusion process is 
capable enough to integrate multiple sources of image [10]. The resultant fused 
image contains fully spectral and spatial resolution features. Image fusion tech- 
nique must fulfill two very basis requirements: (1) fused resultant image always 
have the capability to reverse each and every required information that is obtained 
from input source image; and (2) image fusion technique does not allow any incor- 
rect or inaccurate diagnosis. There are three levels, where image fusion can occur. 
The levels are (1) pixel level, (2) feature level and (3) decision level. In case of pixel- 
level method the pixels of the source images are processed and preserve all the re- 
quired image information. The pixel-level fusion is defined as low-level fusion. This 
is a very simple and common method that is done at the stage of image preprocess- 
ing [11]. This pixel-level image fusion can be divided into two groups: image point 
fusion and single-level fusion. In case of single-level fusion, a set of high category 
signals from different sensors that are consistent with the actual image are obtained 
to amalgamate, where in case of image point fusion each and every point that is 
obtained from different images are amalgamated directly. Feature [12]-level fusion 
is also known as medium-level image fusion that occurred at the feature extraction 
phase. In this fusion level, extracting image features and at the same time synthe- 
sizing the similar features from various images is the major task. The different types 
of features that are commonly extracted are angle, texture, similar lighting area, 
shape, profile, similar depth of focus area and others. 

Decision level is defined as the highest level of fusion. All the useful informa- 
tion that are extracted from either feature-level image fusion or pixel-level image 
fusion are used to get best decision to successfully achieve the desired objective. 
Decision-level image fusion results are responsible to take any type of control and 
decision for the next stage. 

Image fusion technique is categorized into three major divisions such as spatial 
domain fusion, transform domain fusion and statistical domain fusion. The spatial 
domain fusion technique handles with the pixel values of images directly. This tech- 
nique is used to manipulate the image pixel value to successfully achieve the desired 
objective. There are different and most commonly used spatial domain fusion meth- 
ods available such as Intensity-hue-saturation (IHS)-based methods, averaging, prin- 
ciple component analysis, Bovey transform and high-pass filtering method. In case of 
frequency domain technique, first conversion of an image into frequency domain 
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occurs vvith the help of Fourier transform. The necessary operations occur on Fourier 
transform of the particular image and after that to achieve the desired result inverse 
Fourier transform can be applied. There are also available commonly used transform 
domain fusion methods such as pyramid transform and wavelet transform [13]. 
Statistical domain fusion uses statistics to get the desired output. The statistical vari- 
ables, for example, local correlation average, local correlation average with respect to 
variation and least squares are most frequently used. Drawbacks of image fusion 
such as dataset or operator dependency and color distortion can be solved through 
statistical domain fusion method. Some of the most common methods that fall under 
the category of statistical domain fusion are local mean and variance matching, local 
correlation modeling, local mean matching, regression variable substitution and 
others. Averaging fusion method is used to achieve the resultant final image where 
all the regions are focused. The average value is found out by applying the summa- 
tion of all pixel values of every input images, which is divided by the total number of 
input images. This average value is used to give the corresponding resultant pixel 
images. The speed of this averaging fusion method is very fast. Averaging fusion 
method is defined as a simplest technique that is used to calculate the weighted aver- 
age value from all the images that are taken as input and then the results are re- 
flected on final fused image. The application of image fusion can be seen in various 
fields, where the image analysis is needed such as satellite image analysis, robotics, 
medical image analysis, remote sensing application, microscopic imaging and com- 
puter vision. 


2.4 Proposed method 


There are two types of environment in which face detection can take place: con- 
trolled and uncontrolled environments. In a controlled environment, there is 
a camera mounted on the wall and the subjects are required to come in front of the 
camera to get their face recognized. The subjects need to stand in front of the cam- 
era in a specific angle, such as their full frontal face gets captured by the camera. 
There are other requirements that need to be confirmed to, for example, the proxim- 
ity of the subject to the camera and proper lighting. In the uncontrolled environ- 
ment, on the other hand, there are no face-to-face interaction between the camera 
and the subjects. The subjects are not required to stand in front of the camera in 
any specific angle as such. In the proposed method, the uncontrolled environment 
has been used. At first, the input video has been taken where the individual move- 
ment has been captured. Then the captured video is divided into frames. Binning 
technique is deployed on the whole set of frames. In our method, the bin size is set 
as 10. The middle frame is selected as a key frame from each and every bin. The 
selection is done in an adaptive way. Image fusion operation is taken place on all 
the key frames. At the next phase, the correlation is computed with the help of the 
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Figure 2.1: Proposed methodolosy. 


fused key frame and the facial image gets stored in the database. The correlation 
values of each comparison are stored in a cell or array. Once all the comparisons 
are over, the image that has the highest correlation value is taken to be the matched 
image (Figure 2.1). 


2.5 Experiments and results 


In this proposed system, MATLAB R2013a software, 64-bit operating system, x64- 
based processor, Intel Core i3-4005U CPU @ 1.70 GHz has been used. 
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Figure 2.2: Database. 


m the proposed method two database sets are used. The first database set that 
is shown in Figure 2.2 consists of 30 folders. Each folder consists of five images of 
an individual, so a total of 150 images are stored in the database. The images that 
are stored in the database are basically the frontal faces [14] as well as the partial 
faces of the individuals. The images are captured in an uniform lighting and same 
background environment. In the proposed method, the uncontrolled environment 
has been used. At first, the input video has been taken where the individual move- 
ment has been captured [15]. After that the captured video is divided into frames. 
Binning technique is deployed on the whole set of frames. In our method, the bin 
size is set as 10. The middle frame is selected as a key frame from each and every 
bin. The selection is done in an adaptive way. Image fusion operation is taken place 
on all the key frames. In this case, averaging method is used as an image fusion. At 
the next phase, the correlation is computed with the help of the fused key frame 
and the facial image is stored in the database. The correlation values of each com- 
parison are stored in a cell or array. Once all the comparisons are done, the image 
that has the highest correlation value is taken to be the matched image. After per- 
forming the proposed method in the database 2, the acceptance rate is 86.67%. 

Some of the accepted cases and some of the false cases are shown in Figures 2.3 
and 2.4. Image fusion operation takes place on all key frames. In this case, averag- 
ing method is used as an image fusion. 

At the next phase, the correlation is computed with the help of the fused key 
frame, and the facial image is stored in the database (Figure 2.5). The correlation 
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Figure 2.4: False cases. 


Figure 2.5: Fused image. 
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values of each comparison are stored in a cell or array. After all the comparisons 
take place, the image that has the highest correlation value is taken to be the 
matched image. As the image area is quite large and the face position along with 
the facial expression varies for each image of an individual, the fused image gives 
a bit of a distorted image. This can be a reason for the low acceptance rate. That is, 
if the position of the face always remains constant, which is not the ideal case, the 
false acceptance rate can be reduced further. In the initial stage, the fusion of eye 
region of each image in the folder and then the correlation with the fused eye 
image has been done. The experimental result of eye region shows the lower accep- 
tance rate than the current experiment with full face fusion. This is due to the fact 
that the fusion region, that is, the eye region, of all the images is very small and no 
noticeable changes are found in Figure 2.6; hence, the correlation value was high 
for all the fused images. 


[<3 Te. "29 ” Figure 2.6: Eye sections. 


We have created our own dataset, whose size is less in the pool to validate the ro- 
bustness of the proposed system. In this database, the total number of images is 24. 
We have taken Official consent has been obtained from all participants in this 
study for fuse of their captured images. In this database set, both the partial faces 
along with the frontal faces are captured but the expressions of the individuals do 
not vary, and remain the same throughout. This database set makes use of uniform 
lighting and the images are captured against the same background (Figure 2.7). 

Some of the accepted cases and some of the false cases are shown in 
Figures 2.8 and 2.9. After performing the proposed method in our own database, 
the acceptance rate is 87.5. 


2.6 Face detection with Internet of things 


At present, maximum technological advancements have taken place with the help 
of a concept named as Internet of things (IoT), where the various real-life physical 
devices are connected to the Internet [16, 171. This IoT technology consists of very 
powerful, precise and riskless infrastructure along with features like minimum 
power consumption and cost effectiveness, where anything or anyone can be com- 
municated or connected with each other anywhere or anytime to achieve the de- 
sired output. IoT can be implemented in different segments in our daily life, such as 
home automation, transportation, agriculture and healthcare segments. One of ex- 
pandable areas using IoT infrastructure [18] is face recognition, which can be 
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Figure 2.7: Prepared dataset. 
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Figure 2.9: False cases. 
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applied in different fields such as biometric system [19], attendance system and se- 
curity reasons. Nowadays, attendance system is a mandatory prerequisite for any 
organization but maintaining the attendance manually is a very time-consuming 
and difficult task. To resolve this issue, several automated methods have been im- 
plemented which is not only easy to handle, but also the accuracy level of these 
systems can be better [20]. Face recognition system is one of the popular human 
identification processes, where the ambiguities such as time consuming, fake atten- 
dance, high cost and human errors are resolved [21]. This system can be used in any 
organization like school, college, bank and corporate office to reduce the probabil- 
ity of any complication such as fake attendance by feature [22, 23] identification. In 
this system, the attendance of each and every person is automatically recorded 
whenever they enter into their workspace through the continuous detection of each 
and every person’s face. After that the detected faces are simultaneously compared 
with the previously taken database. If the detected image is matched with the 
stored image, then the attendance is given to that particular person, otherwise not. 
The partial face recognition system is a part of face recognition which is also a very 
challenging and interesting process. In this case, the picture of a person’s partial 
face is taken with the help of a camera and the database consists of the full face as 
well as partial face of that person. The intermediate and all the other steps are simi- 
lar with any face recognition process. This partial face recognition can also be im- 
plemented with the help of IoT technology, where the camera is connected to 
a raspberry pi and then the comparison of images is done with the stored images in 
the database. The accuracy level of this type of attendance system is generally bet- 
ter when compared with the manual attendance system. 


2.7 Conclusions 


Partial face recognition algorithm is a modern and advanced technique. The pro- 
cess includes various advantages as well as limitations. It is also an efficient 
method of biometric identification technique. The proposed method is applied in 
a large data set, which gives the acceptance rate of 86.67%. We have also created 
our own dataset, whose size is less in the pool and the proposed method is also 
applied in that dataset which gives the acceptance rate of 87.5%. In this proposed 
method, averaging technique of image fusion and after that correlation method is 
used but other fusion techniques also exist through which the value of the correla- 
tion method may vary affecting the acceptance rate; hence, the accuracy may be 
varied. 
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3 Threat analysis and attack modeling for 
machine-to-machine communication 
tovvard internet of things 


Abstract: The wide variety of Internet of thing (IoT) applications demands a secure 
and efficient communication channel that resists against a variety of modern attacks 
and fulfils application requirement. There are various IoT threats and challenges that 
must be addressed to make a communication secure in 1oT. As growth in devices in- 
creases with their potential misuse, so there is a need to integrate security features into 
the available IoT algorithms and protocols. At the same time, we need to design new 
IoT protocols and algorithms for extended features of machine-to-machine (M2M) com- 
munication. This chapter has proposed a protocol stack that is mapped to the 
Transmission Control Protocol/Internet Protocol (TCP/IP) which is used for communi- 
cation and connection of network devices on internet. The protocol present in 
a particular layer must acquire a security feature of associated layer. This chapter also 
elaborates on M2M communication in IoT. This chapter presents and discusses the lit- 
erature survey corresponding to access control mechanism and trust management poli- 
cies. From the literature survey it is observed that the existing security protocols, 
methods and algorithms are not suitable for 1oT resource-constrained environment. 
The various resource-constrained devices are unable to cope up with different attacks. 
This chapter gives detailed analysis of attacks with its behavioral modeling. If the 
reader understands how attacks happen, then it will be easy to investigate solutions. 
From the extensive literature survey this chapter has drawn gap analysis, which gives 
insight into security requirements of IoT protocols and security algorithm. In addition, 
the chapter proposes a novel security framework that emphasizes on making secure 
communication layer with the help of trust management policies, distributed access 
control framework and privacy-aware protocols. 


Keywords: Internet of things, M2M communication, threat analysis, IoT protocols, 
attacks 


3.1 Introduction 


The term “Internet of things” (IoT) was coined by Kevin Ashton at Procter & Gamble 
in 1999 [1]. At that time, he observed that radiofrequency identification (RFID) is re- 
quired to the 1oT, which would help computers to handle all individual things. In the 
era of computation, IoT is the important buzzword that drives global market. It is the 
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communication network of people, services and things. It also follows service-oriented 
architecture by providing service to other components of its architecture. It provides 
a communication channel to all varieties of devices for interaction with the help of the 
Internet. If we look from the architectural perspective, it is clear that it is 
a convergence of various technologies. The seamless integration of various technolo- 
gies makes IoT more successful in global IT market. In near future, billions and tril- 
lions of devices are going to be connected over the Internet. According to a report 
given by global institute, considerable growth in devices of 300% has been observed 
in last half decade [2]. The same exponential growth is expected in near future. The 
objective of these connected devices is to bring betterment to human life. So, IoT is 
implemented in various domains such as agriculture, supply chain management, wire- 
less sensor network (WSN) and health care. The advancement in each domain is ob- 
served in the last 5 years. 

Since last few years, researchers have been trying to propose generic IoT archi- 
tecture but still there is no standard architecture for IoT. Generic IoT architecture is 
composed of four layers, including application layer, middleware layer, network 
layer and perception layer [3]. According to the International Telecommunication 
Union (ITU), IoT architecture consists of five layers, which includes sensing layer, 
access layer, network layer, middleware layer and application layer [4]. 
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Figure 3.1: loT layered perspective. 


Figure 3.1 mainly shows an architectural perspective of IoT [5]. This architecture 
can be viewed as a service-oriented architecture, in which each architectural com- 
ponent or layer provides service to other layers or component in the architecture. 
The edge technology layer helps to connect sensor networks, things and RFID to 
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access gateway layer. This access gateway layer is a collection of various network 
devices and middleware which supports connectivity between Internet layer and 
access gateway layer. Internet layer supports Internet protocols that are required 
for networking. Application layer handles all types of smart applications, for exam- 
ple, smart transportation and smart home. 

In real-time application development, the data flows from sensor devices to 
middleware using edge technologies like Wi-Fi and Bluetooth. The middleware is 
a software or hardware component that acquires data and performs basic analytics 
to take local decisions. This data from middleware travels toward cloud end with 
the help of Internet. There are various cloud service providers such as AWS, 
Microsoft and IBM, which provide a platform for IoT application development. 
Finally, this collected data is used for the analytical purpose. These analytical re- 
sults help to take best decisions and for building smarter applications. 

IoT is mature enough in European countries; however, there are some developing 
countries that are facing problems in implementing IoT [6]. At some places, the pic- 
ture of IoT is still very blur. So, another term that is used as the replacement of IoT is 
machine-to-machine (M2M) communication. Actually, the scope of IoT is not limited 
to only M2M communication, rather, we can say M2M communication is part of 1oT 
network. In M2M communication, the machines or devices are connected to each 
other to control, monitor and exchange data with the remote machine. M2M commu- 
nication enables the capability of embedded hardware for sensing, actuation and 
communication. In M2M communication the network can be developed with the help 
of wired or wireless media to communicate with other heterogeneous types of devi- 
ces. This communication allows gathering information from the edge of all enter- 
prises and applying various ways to make a positive impact on business growth. 
M2M communication is a subset of 1oT. In M2M communication participating devices 
are independent of Internet connection. In M2M communication there are limited op- 
tions for integration in the system because participating devices need to match com- 
munication standards. In the IoT, there are unlimited options for integration but it 
requires a solution that efficiently integrates all system components [7]. 

TCP/IP protocol stack gives a practical orientation of real-time communication. 
This suite consists of various protocols that work at different layers but the problem 
with the existing protocol is that it is not suitable for IoT [8]. ToT network consists of 
resource-constrained devices. Hence, IoT is in need of a protocol stack that accom- 
modates lightweight protocols of IoT. 


3.1.1 Various protocols used in loT at all layers 


IoT follows service-oriented architecture, which means one component of architecture 
provides service to another layer of architecture. If we look it as a layered architecture, 
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then one layer provides services to other layer. This task is beautifully carried out vvith 
the help of protocols. Figure 3.2 shovvs protocols used at different 1oT layers. 


Application layer: 
HTTP CoAP MQTT XMPP DDS JSON 
RESTFUL 


Transport layer: 
TCP UDP TLS DTLS 


Network layer 
| IPv4 IPv6 6LoVVPAN RPL 


| Linklayer 
802.3- Ethernet 802.11-VViFi 802.16-VViMax 
2G/3G/LTE-cellular 


Figure 3.2: Protocols used in loT at all layers. 


1. Link layer 
Link layer decides to transfer data physically over network’s physical layer or 
medium, for example, radio wave, coaxial cable or copper wire. The scope of 
link layer is a local network, a connection to which the host is attached. Data 
packets are exchanged over link layer by host using link-layer protocols. Link- 
layer protocols in context of IoT are 802.3- Ethernet, 802.11-WiFi, 802.16- 
WiMax and 2G/3G/LTE-cellular. 

2. Network layer 
This layer is responsible for sending of IP datagram from the source network to 
the destination network. Protocols used in this layer are IPv4, IPv6, and 
6LOWPAN. 

3. Transport layer 
The protocols in this layer provide end-to-end message transfer capability. 
Protocols used in this layer are TCP, UDP, TLS and DTLS. 

4. Application layer 
Protocols in this layer define how application interface with lower layer proto- 
cols to send the data over the network. Protocols used in this layer are HTTP, 
CoAP, MQTT, XMPP, and DDS. 


3.2 Motivation 


IoT promises a key role for information transaction and medium, management and 
computing since the beginning of the twenty-first century. As discussed in the 
above section, it is clear that IoT is open to the Internet and it is obvious that it is 
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open to the attacker to attack the system. Consider any application like health care, 
military, smart home, smart industries and so on. These industries use IoT-enabled 
systems. Now, in these systems, sensors sense an environmental parameter and 
pass data to the next IoT component and final destination of data is a cloud. In the 
above scenario, data travels from the sensor node to cloud environment, and in 
transit the data is open in Internet. Attackers try to attack the system and try to col- 
lapse the system. In order to provide security to the whole IoT network, it is re- 
quired to analyze every type of attacks that can happen in IoT. Purely, security to 
data is not sufficient; we need to provide security at each layer and to each compo- 
nent of IoT architecture. IoT consists of resource-constrained devices for which we 
cannot use existing security protocols, algorithms and policies. In order to maintain 
security of each solution against every attack, we need to study behavioral model- 
ing of each exposed attack. The objective of this chapter is to understand security 
in IoT as it is a fundamental pillar of 1oT ecosystem. At the same time, it is required 
to analyze behavioral modeling of most possible attacks to provide a solution set in 
near future. 


3.3 Threat analysis 
3.3.1 Threats and attacks at various layers 


Table 3.1 lists the threats and attacks at various layers. 

A threat is something that may or may not happen, but has the capability to 
cause serious damage to network and data as well. Threats can lead to attacks on 
computer systems, networks and more. Security threats and vulnerabilities of the 
M2M communication in the IoTs are explored in this section. 


3.3.2 Threat Analysis 


Security and privacy is always a major concern when data and resources are open 
to Internet. In order to develop security solution it is required to analyze the behav- 
ior of each and every aspect of threats. Security threats have been explained in the 
context of M2M communication. 


Cloning of thing 
Many times an untrusted device manufacturer creates a clone device that is having 


identical security configuration, link-layer properties and unique identification of 
things of real one. To attract customers, these cloned faulty devices are sold at 
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Table 3.1: Threats and attacks at various layers. 


Layer 


Application layer 


Threats 


VVarms and virus 
Troyan horse 

Buffer overflow 
APP/OS weakness. 
Identity theft and 
unsecured end devices 
Insufficient patching 
and testing 


Multilayer data manage- 


ment and security 
Phishing 
Ransomware 

loT botnets 


Attacks 


mpersonation attack 
or clone attack 

Man in middle attack 
DoS attack 

Malware 

Phishing 

DDoS attack 

SQL injections 

XMAS attacks 


Presentation layers 


Viruses 
Wormwares 


Session layers 


Personal information 
retrieval 

Root privilege access 
Net bios 

DoS 


Transport layer 


Port scanning 
TCP sync flooding 
UDP flooding 


DOS 
DDOS 


Network Layer - Sniffing - Man inthe middle attack 
- IP alteration - ICMP attack 
- DHCP attack - Sybil attack 
- Phishing - DoS attack 
- Sinkhole attack 
Data link layer - ARP attack - ARP spoofing 
- MAC address alteration - Sniffing 


MAC flooding 


MAC flooding attacks 


Physical layer 


Cable disconnected 
Cloning of things 


Unauthorized access to 


tags 
Tag cloning 


Passive sniffing over a 
media 
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lower price in the market. With the help of these devices, an attacker can hack orig- 
inal devices or degrade the performance of genuine devices. With cloned things, 
the manufacturer can observe the data traveling in the network and may perform 
a Sybil attack and node replication attack. A manufacturer can implement 
a backdoor for any confidential application. In the RFID system, tag cloning is eas- 
ily possible because of weak authentication mechanism [9]. 


Commissioning of a thing 


At the time of commissioning of things, things can be vulnerable to eavesdrop- 
ping attack. Mostly configuration settings, security parameters and keying materi- 
als may be compromised through wireless medium. The attacker might be able to 
recover the secret key after obtaining keying material, thereby the authenticity 
and confidentiality may be compromised. If communication channels are not 
properly protected, M2M communication may eavesdrop or even session key can 
be compromised because of a long period of usage without key renewal or 
updates. 


Malicious replacement of things 


Sometimes attacker adds a new node in the network of participating node and as- 
signed node identification information. The replaced node is involved in malicious 
activities. Sometimes it is possible that, in order to save the cost and increase profit 
from the system, the lower quality sensors are placed in the network. Attacker finds 
out such low-quality nodes and targets them for malicious activities, Due to this at- 
tack, the performance of the system is hampered. At the same time attacker can 
change the direction of packet toward malicious server enabling an attacker to 
monitor network activities [10]. 


Unreliable communication 


If we use an unreliable communication link it raises the question of data integrity. 
The attacker can target this unreliable communication medium as a target and 
can perform a man in the middle attack. The unreliable communication link does 
not guarantee the successful delivery of the message. If packets are not delivered 
to destination, retransmission of packet takes place, which leads to dropping 
down the performance of the system. Due to multiple retransmissions, the time 
required to reach destination also increases, which affects the throughput of the 
system [11]. 
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Resource constraints 


The IoT network is mostly filled with embedded computing devices that appear to 
be resource constraint. The resource constraints are not only applied to the memory 
and processing capability but also to low bandwidth utilization, which leads to con- 
straints on the network interface. Due to the resource-constrained devices, IoT sys- 
tem is vulnerable to security attacks. 


a. Limited computing power and memory 

These embedded devices require to possess sufficient amount of computational 
power with which they can complete the allocated task. To improve the lifetime of 
embedded devices, these devices should be designed in such a way that they can 
perform the required set of operations with minimum computational efficiency as it 
has limited memory and storage. For resource-constrained devices, we need to ana- 
lyze bare minimum features that will be integrated into embedded devices. The re- 
searcher needs to develop lightweight security protocols that are complex to break 
by considering crucial security measures. There is always a trade-off between proc- 
essing power and the memory requirement of security algorithm. For these proto- 
cols, we need to leave enough space for security software that strongly resists 
security threats [12]. 


b. Limited battery 

IoT is a network of connected devices. The idea here is to connect everything to ev- 
erything to collect data and obtain analytical results from that data to make an in- 
telligent system. Most of the time the remotely placed devices are battery powered. 
Therefore, researchers are working on ideas/mechanism to increase the lifetime of 
the battery. There are lots of parameters that decide the lifetime of the battery. 
Security protocol, mathematical operation and network protocol are the key param- 
eters that drain the major portion of the battery. The complex security protocols 
lead to battery drain, due to which lifetime of the device decreases. Hence, there is 
a need for lightweight security protocols with minimum computation and memory 
that does not harm the lifetime of devices [13]. 


Identity theft and unsecured end devices 


In IoT, security plays an important role in real-time scenarios. In IoT, we need to 
take care of devices, especially those devices that hold important financial and 
private information. In some IoT systems, these devices are made secure with dif- 
ferent security mechanism. But all IoT devices are not secure enough to prevent 
identity theft and security breaches, for example, there are a variety of vendors 
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selling a smartwatch but only 50% smartwatches allow its users to set authentica- 
tion password. There are various enterprises that do not bother about vulnerabil- 
ities within IoT devices. The available security mechanisms try to prevent attack; 
however, the attacker hacks the data center or network. Due to this type of theft, 
impersonation attack or clone attacks are possible [14]. 


Privacy threat 


In IoT, there are some applications that carry user’s sensitive data. It is required to 
protect that data from being exposed to IoT environment. It is a major point of con- 
cern if devices carry health-related data. The services provided by these connected 
devices offer better human life but at the same time, the privacy of the user should 
not be compromised. The tracking of objects’ location and its usage may lead to 
increased privacy risk to the end users. When information is passed inside IoT sys- 
tems only, the attacker may infer the information by performing analytical opera- 
tion and inferred data can predict the behavioral pattern of user’s interest and such 
information will be sold for marketing purpose. 


Insufficient patching and testing 


Insufficient patching is the most common and the biggest problem faced by the 
IoT ecosystem. The problem of patching is mostly ignored by the system supervi- 
sor. The outdated devices may have some software issues, incompatibility with 
other devices, set of protocols used or it may contain some bugs or vulnerabilities. 
So, to break the security of the system, attacker may use these vulnerabilities as 
the door to open into systems. The patching is required to secure the system from 
the above-mentioned vulnerabilities. Now, it is important to monitor and test 
each updated path to maintain stability of the system. Insufficient patching and 
testing also give way to the attacker to enter into a system that leads to cloning 
attack or malware [15]. 


Multilayer data management and security 


The IT industry is moving rapidly, so in a real-time scenario, it becomes very much 
necessary to adopt changes by deploying new technologies like cloud, big data and 
IoT. This deployment of new technology is more important than securing the infra- 
structure and network. As IoT drives the global market including financial organi- 
zations [16], it should not compromise with security threats. By considering all 
aspects of infrastructure, security should be placed at the central point of 
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investment. For any application development, we need to provide security at each 
and every layer of our network. The layers at which security is important are (1) end 
devices, (2) softvvare configurations, (3) communication framevvork or channel and 
(4) web cloud and mobile environment. 


Phishing 


It is a kind of social engineering attack in which an attacker steals user’s sensitive 
data like login credential or credit card information. It is not a new type of attack 
but despite growing awareness about this attack, organizations are unable to pro- 
vide full resistance against sophisticated social engineering attack. This attack has 
a variety of results [17]. 


Ransomware 


Ransomware is a kind of malicious software in which attacker threatens the victim 
to publish victim’s sensitive information or purposefully block access to its resour- 
ces until a ransom is paid to the attacker. This attack is performed through Trojan. 
This Trojan file hides behind the legitimate file and is sent to victims as an email 
attachment. When the victim opens this file, the malware takes the ownership 
rights of the victim’s resources. For relieving access to victim, attacker demands 
ransom. The example of ransomware is “WannaCry” ransomvvare, which automat- 
ically travels in the network without any interaction with victims. The windows 
user is mostly affected by this attack. The evolution of this attack is still in prog- 
ress. Generally, a target for attacker is a high-end server because it carries 
a massive amount of sensitive data [18]. The windows user mostly affected by this 
attack. 


loT botnet 


The distributed denial of service (DDOS) performed on Dyn proves the potential 
of DDoS attack in IoT. This happens because of the lack of embedded security 
and fewer security considerations for participating devices. The botnet is the 
most widely used weapon to attack IoT devices. Botnet means the computer 
that is controlled remotely. The access to devices is gained by injecting mal- 
ware inside the devices. These infected devices communicated with other par- 
ticipating nodes in the network or server and wait for an instruction from the 
attacker [19]. 
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3.4 Attack modeling 


The objective of this section is to provide information about how attacks are per- 
formed. This helps the researcher to work on mitigation technique to prevent the 
attack or to control the damage. 


1) Sybil attack 

In IoT, each individual device carries its own identity. In this attack, malicious 
nodes communicate with other nodes via separate communication link. For identity 
establishment, the attacker creates duplicate identity of the legitimate node and 
hides behind that node. In this attack, the attacker is present at multiple places at 
the same time. This can be done by identity spoofing [20]. 

In the given Figure 3.3, device 1 gets access from server after authentication. 
Then the attacker gets the id proof of device 1 from server and starts communicating 
with the other device pretending to be device 1 communicating with device 2. In 
this process, the id proof of device 1 gets compromised and is used by the attacker 
to retrieve data from device 2. 


Device 1 Server or cloud Attacker Paice? 
1; Send id proof and request for authentication(} 


2: Server authenticate id of device1() 


"3 : Snatch id of devite1() 


A: Communicate with id of device1 to device2() 


5: Permission granted with id proof of device1() 


6 : Id proof gets compromised() 


Figure 3.3: Sybil attack. 


2) Data integrity attack 

In this type of attack, the data is monitored or altered when it travels through the 
network. The attacker changes the contents of the data packet by injecting false in- 
formation into the packet. By performing this attack, attacker increases impurity in 
the sensor data and by doing so he creates an obstacle in victim’s research. We can 
say that it is a kind of DoS attack. The impure data gives poor decisions. The at- 
tacker adds impurities in victim’s database that are in acceptable range. So, it is 
very difficult for the victim to find out and separate impurities in the dataset. 
Various practical approaches are presented to prevent this attack [21]. 
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Figure 3.4 shows how data integrity attack happens. In data integrity attack, 
attacker targets any legitimate node of the network. Then attacker injects malicious 
code into that node. This infected node acts as a malicious node. An attacker can 
change the code of a malicious node; it alters data that is transmitted by the mali- 
cious node. This faulty data will be transmitted to all other nodes in the network. 
The communication between all these nodes has been represented in Figure 3.4. 


Attacker Source node Intermediate node Malicious node Destination node 
1: Initial attackt) 


2 "Get credentials() 


| 3: Perform attack() 4: Code modify() Modify 
: : code 
Alter data 


5 : Distribute fake dataf ) 
| 6 : Distribute fakeidata() 
_ 7: Distribute fakeidata() 


8 : Receive daia() 
Figure 3.4: Data integrity attack. 


3) Node replication attack 

This is an application-independent attack. First, attacker captures a single legiti- 
mate node and gathers information like secret credentials, code and crypto- 
graphic material, and if required attacker can modify code and change the 
behavior of node. Further attacker replicates the same image to other node and 
deploys these replicated nodes in the environment. This type of attack is very de- 
structive. The general-purpose authentication and security methods cope up with 
this attack [22]. 

The behavior of node replication attack is represented in Figure 3.5. Various en- 
tities participate in this communication. The attacker initiates the attack and targets 
any legitimate node of the network. Before the attack, attackers analyze all unse- 
cured roots through which they can enter into the network. Once they are able to 
manage legitimate node then attacker collects all the secret information of node 
such as credentials and secret keys. Once an attacker gets this information of the 
legitimate node, the information will be modified. According to the attacker’s re- 
quirement, the same information will be implanted in node memory. After that 
these infected nodes act according to the attacker’s instructions. In this way at- 
tacker can make the target network unstable. 
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Attacker Source node Intermediate node Malicious node Destination node 
1: Initiate attack()! 
i 2: Initiate attack() 1 3: Collect data() | 


Secrete key 
credentials 
: x: Cryptographic 
: 4: Get valid data() i information 


5 : Get valid data() i 
6 : Modify data() 
7 : Forward faulty data() 


8 £ Forward faulty data() 


-9 : Perform attack() i 


10 : Forward faulty data() 


: 11: Monitor data() I 
: 12 : Monitor data() : : 
13 : Monitor data()! : 


Figure 3.5: Node replication attack. 


4) DoS attack 

Denial of service (DoS) attack makes service unavailable. The attacker makes an at- 
tempt to prevent users getting services or access to resources. DoS is difficult to per- 
form but it is dangerous. The attacker continuously sends request packets to the 
server. If the server is unable to handle these large number of requests, then it results 
in server unavailability [23]. 

In Figure 3.6, device 1 is able to get services from server after its identity is veri- 
fied. After that device 1 gives encrypted data to server, which is retrieved by the in- 
tended device. Then device 2 gets authenticated from server and tries to access 
encrypted data stored on server by device 1. At the same time attacker uploads 
large file on server or continuously gives data to server, thereby preventing device 2 
from getting its requested encrypted file from server leading to buffer overflow, due 
to which server is unable to give service to device 2. In this way, DoS attack is done 
by the attacker. 
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Device 1 Device2 Data or cloud Attacker 


nd id proof and request for authentication() 


3: Give access permission() [0S3 MAN ə 


4 : Give encrypted data() 


5: Authentication and authorization to encrypted data() 


6: Upload large file or buffer overflow() 


3 7 : Denial of service(), 
Figure 3.6: Denial of service attack. 


5) Replay attack 

It is a type of network attack in which data transmission on authenticated channel 
is observed by using legitimate user credentials and repeatedly transfers data to the 
destination node. This attack can be done by either originator of message or man in 
the middle. It is also a kind of man in the middle attack [20, 24]. 

The sequence diagram of replay attack is represented in Figure 3.7. In this type 
of attack, attacker attacks legitimate nodes of the network and collects all the infor- 
mation from the intermediate node. An identity is assigned to the compromised 
node. The attackers spread wrong data in the network or turn traffic of malicious 
node toward the compromised server. Valid data transmitted is repeated either by 
malicious node or source node. Malicious node can also intercept and modify data. 


6) Man in middle attack 

In this attack, attackers try to gain control of the communication link that connects 
the endpoints. This attack leads to compromised data confidentiality and data in- 
tegrity. It is also referred as bucket brigade attack or fire brigade attack. There are 
various versions of this attack. In this type of attack, attacker can alter the data 
while two parties are communicating and we believe that they are directly commu- 
nicating [25]. 

A public key cryptosystem is vulnerable as shown in Figure 3.8. For communi- 
cation between two devices, key exchange is required in public key cryptosystems. 
When device A wants to communicate with device B, device A requests to device 
B for its B’s public key. An attacker intercepts its request and sends its own public 


3 Threat analysis and attack modeling for M2M communication towards IoT — 59 


Attack Source node Intermediate node Malicious node Destination node 


1: Initial attack() 


: 2: Collect data() 
3 : Get credentials() 


4 “Assign credentials(): GH ; ; 

: | 55: Modify() Modify 
delete 
data 


e : Forward data() 


7 : Forward data() 


_ 8: Forward data() x 


9: Forward data)? 


Figure 3.7: Replay attack. 


Device A Attacker Device B 


1:A wants ito communicate with B, sp A requests public key of BÜ) 
2: Attacker intercepts and stoles the key() 


3. Gives attackers public ken? 
A: Deviçe A send encrypted data > device B but actually it reads by attacker() 
5 : To maintain communication attacker encrypt data and send to B() 
6 “send attackers publicikey to BÜ 


7 : Device B talks to attacker in understanding of device A() 


Figure 3.8: Man in middle attack. 


key to device A. So whatever sent by device A to device B is intercept and read by 
an attacker. For maintaining communication, attacker re-encrypts this data by de- 
vice B’s public key and sends it to device B. Attacker also sends its own public key 
as A”s public key to device B. 
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7) Sniffing 

It is a program that monitors data traveling over the network. This sniffing is re- 
quired for monitor-authenticated netvvork as vvell as for stealing netvvork informa- 
tion. These unauthorized sniffers are very much harmful because it is very difficult 
to identify sniffer-affected nodes and can be inserted at any node of netvvork. This 
makes sniffing attack more popular in attacker community [26]. 

In Figure 3.9, devices 1 and 2 communicate with each other via server. The en- 
crypted data is stored and is accessed by device 2 which is monitored or sniffed by 
the attacker. Finally, attacker gets the intended data that is sniffed by device 1 dur- 
ing the process of storing in server. Then attacker makes some changes into the en- 
crypted data. Thus, device 2 receives corrupted data. 


Device 1 Device 2 Cloud or server Attacker 


1 “Send id proof and request for authentication() i 
: f 2: Cross check() 
3: Give access()) i 


4 : Request to store data which is in encrypted form() 


5: Request for access to encrypted data() 


6 1 Access permit by cloud/server() 


7: Sniff commuication channel() 
x 8 : Request data() 


9 : Modify data() . 


10 : Receive corrupted data() 


Figure 3.9: Sniffing. 


8) Ransomware 
It is a kind of malware that restricts the victim to access its own resources like 
important files of computers and demands for money to remove restriction on re- 
sources. There are two very common mediums through which these ransomwares 
enter the system, which are phishing email and USB drives that contain malicious 
software or files [27]. 

In Figure 3.10, attacker enters into the system through email attachment files, 
external hard disk drives or USBs, which causes worms or viruses to enter into the 
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Device Personal computer Attacker 


1: Enter ransomewae through Internet, USB, HDD() 


2: Enter in computer and try to access drives() 


3 : Demand money for unlock personal data() 


4 : Pay money() 


5: Not guarantee to give access to persnal computer() 


Figure 3.10: Ransomware attack. 


system and blocks the personal data and drives of the device. When the device tries 
to access the personal data, then attacker demands money for unlocking of per- 
sonal files. If device makes payment then also attacker does not guarantee to give 
access to its personal data or drives. As per Figure 3.10 attacker sends email with 
attachment and victim opens that attachment. Now, the malware restricts the victim 
from accessing its own resources like important files of computers and demands for 
ransom. Once payment is done then only attacker releases the victim’s resources. 


3.5 Literature survey 


As outstanding research has been carried out in the field of IoT, however, there are 
still various vulnerabilities present, which makes IoT insecure. As a result of this, 
attackers have invented so many attacks on IoT even before IoT could mature in the 
IT industry. So there is a need to study the various leading attacks and threat analy- 
sis in IoT. The large scale of heterogeneous and resource-constrained devices with 
lack of uniformity makes it challenging to provide security in IoT environment. 
Kaur and Singh [28], and Reed [29] classify attacks on the basis of the OSI layer. 
The variety of security attacks on RFID system have been addressed in [30]. The vari- 
ety of attacks on RFID systems along with possible solutions have been proposed in 
[31]. General categorization of attacks has been proposed in [32]. This paper classifies 
attacks by considering properties and target layer into four categories, that is, encryp- 
tion attack, software attack, network attack and physical attack. According to the lit- 
erature survey, possible categorizations of attacks in IoT are shown in Figure 3.11. 
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Barki [33] emphasizes on M2M research and development works, which mainly 
addresses security, threats and vulnerabilities that occur in M2M communications. 
Sicari et al. [34] give an overview of research challenges with possible solution 
methodologies to make IoT ecosystem secure. There are various security issues but 
major ones are identified in eight categories: (1) proper authentication mechanism, 
(2) confidentiality, (3) access control policies, (4) trust-related issues, (5) policy en- 
forcement, (6) mobile security, (7) security of middleware and (8) privacy policies. 
Firdous et al. [35] explain the MQTT threat model and they evaluate the perfor- 
mance of DoS attack that targets MQTT brokers. 

In real-time scenario, millions and billions of devices are communicating with 
each other. Sometimes devices carry data from users’ personal space and travel 
over the Internet. Therefore, there are more chances that the privacy of data gets 
compromised. In [36], the various privacy policies for different data have been pro- 
posed to protect user’s privacy. Each privacy zone is mapped with the context- 
based method and is verified by Home Security Hub. This process is done before 
acceptance of joining or rejoining of requests to protect user data against unautho- 
rized data sharing. However, the chances of locating smart devices directly bypass- 
ing the hub are not considered. 

Que and Ma [37] propose a novel methodology for mutual authentication and 
key establishment scheme for the M2M communications, which uses 6LOWPAN net- 
works. The session key will be established to authenticate each device with remote 
server in G6LOWPAN networks. This scheme also prevents various malicious attacks 
like Sybil attacks, replay attacks, MITM attacks and impersonation attacks. This 
scheme also incurs less computational overhead and transmission overhead. 

Lin et al. [38] propose a local authentication and access control scheme, which 
is designed for verification of access rights and user privileges in M2M communica- 
tion. Device heterogeneity is also supported by this scheme. In order to improve the 
scheme, a novel SOC (securely outsourcing computation) algorithm has been pro- 
posed. This algorithm offloads the computational cost from M2M devices to the user 
equipment. This algorithm is also energy efficient, and also satisfies the security cri- 
teria of user anonymity, secure key agreement, mutual authentication and SOC. 

Mahalle et al. [39, 40] have designed an identity establishment and capability- 
based access control protocol. This scheme uses elliptical curve cryptography for 
security. This scheme also supports protection from replay attack, man in middle 
attack and DoS attack. 

Esfahani et al. [41] have proposed a hash-based lightweight authentication 
mechanism, which uses XOR operations in M2M communications. The proposed 
methodology incurs low computational cost, and at the same time it removes the 
burden of communication and storage overhead for achieving session key agree- 
ment and mutual authentication, and holds a device’s identity confidential. This 
scheme is also attack resistant to modification attack, replay attack, impersonation 
attack and man in the middle attack. 


64 —  Poonam N. Railkar et al. 


Chen et al. [42] propose a security gateway application that will help to im- 
prove gateway application of ITU-TM2M service layer. This ITU-TM2M service 
layer is a layer of 1oT”s reference model. This application also provides a secure 
end-to-end M2M message delivery and key exchange generation functions. This 
application supports mutual authentication and symmetric cryptographic negotia- 
tion function which is of lightweight. This application is resistant to data privacy 
attack and relay attack. It also prevents key guessing attack and undetectable on- 
line key guessing attack. 

Mahalle et al. [43] present key challenges, design constraints and framework for 
identity management in IoT. Matrix required for identity is explained in this paper. 

Dey et al. [44] cover applications of big data generated by IoT and how to man- 
age big data generated with all sensors and embedded devices. Applications like 
smart cities, industrial IoT, health care, robotic sensor networks, and smart irriga- 
tion and green cities are described properly in their contribution. Security for elec- 
tronic patient record is explained in detail and the system also tested against 
attacks. Security issues for big data generated by IoT and attacks like side channel 
attack are also discussed. 

Dey and coworkers [44-47] give an overview and implementation details of 
IoT-based wireless body area network (WBAN) in health care. Layerwise WBAN ar- 
chitecture, challenges and required security are explained in [45]. IoT brings ex- 
treme changes in the field of health-care technology. Bhatt et al. [46] describe 
challenges in smart health-care systems and possible vulnerabilities in e-health 
context. They also introduced energy-efficient health-care systems. Privacy, trust 
and security issues are also addressed. IoT architecture is explained in [47]. They 
have also explained IoT applications in health care. 

Hassanien et al. [48] address the problems related to the Internet of medical 
things. They have provided solutions to challenges of medical big data and also re- 
cent techniques for classification of medical big data and machine learning. Privacy 
of data and security analysis is also presented for the Internet of medical things. 

There is tremendous growth in digital communication and massive growth in 
digitization of data from the last few years and it is continuously going to increase 
as there is an evolution in IoT. Sarowar et al. [49] gave examples of the mechanism 
of messaging in M2M communication, in mobile computing and in sensors. They 
have given new techniques for spoofing detection of location, new efficient process- 
ing ideas and clustering tools for next generation are also presented. 


3.6 Evaluation of related work 


This section gives the comprehensive analysis of various attacks. In the following 
table, the detailed analysis of some outstanding research papers has been done on 
the basis of the attack-resistant mechanism proposed. 
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In Table 3.2, Sybil attack, man in the middle attack, DDOS attack, replay attack 
and identity attacks are taken into consideration because these attacks are very 
common in today’s connected world and is widely performed by a hacker. There 
is a need of distributed framework that considers all dynamic aspects of security 
in IoT ecosystem. This framework should be lightweight, scalable, adaptive and 
simple. There are many methods proposed by the researcher to resist the above- 
mentioned attacks. So, we need to design the framework in such a way that it 
accommodates Identity establishment, device authentication methods, light- 
weight key management schemes, access control policies and protects privileges 
of the user. Table 3.2 also represents solutions for security and also tells high- 
lights which solution is resistant to which attacks. The gap analysis is also 
presented in this table. We can observe that there is a need for the security 
framework that protects the system against various attacks. Most of the research- 
ers try to make the authentication process more secure with optimization in 
computational cost and memory. All proposed methodologies or algorithms ful- 
fill the requirements of resource constraints and is mostly applicable to the de- 
vice-to-device communication. 


3.7 Proposed work 


Looking at various threats and in the sequel several attacks in resource- 
constrained IoT and M2M communication, security is of prime concern. Therefore, 
we need access to control solution, trust management scheme and privacy- 
enabled communication scheme. In this view, secure communication framework 
is shown in Figure 3.12. 

The proposed architecture is divided into three layers: 
1. Device layer 
2. Secure communication layer 
3. Application layer 


3.7.1 Device layer 


Here devices are with network capabilities ranging from high-end devices such as 
mainframes to simple sensors that have communication capability. It is very diffi- 
cult to deal with resource-constrained devices. This layer may include sensors, ac- 
tuators, WSN and other things. It is required to enable capability of devices in 
terms of computing, communication and sensing ability. The data collection node 
helps to aggregate data and at the same time plays a vital role in device manage- 
ment task at physical layer. The quality of data determines the quality of result 
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Figure 3.12: Proposed framework for secure machine to machine communication in loT. 


and accuracy of results. The collected data will be forwarded to secure communi- 
cation layer 


3.7.2 Secure communication layer 


This one is the middle layer that securely manages relationships between machines 
and services. This layer basically consists of three stages: scalable trust manage- 
ment model for M2M, distributed access control scheme for constrained environ- 
ment and privacy-aware protocol based on the principle of least privilege. The 
responsibility of this layer is to carry the data that is received from device layer to 
cloud or application layer. To design scalable, attack-resistant communication layer 
we need to do critical analysis of each threat and its behavior in real-time scenario. 
The objective is to provide communication security without losing privacy of user. 


3.7.3 Application layer 


This layer can support many applications, for example, autonomous controlling, 
managing small to high-end devices to provide and perform some services and ap- 
plications. Whatever data received from secure communication layer, management 
of that data and its suitable representation is the responsibility of application layer. 

The proposed framework is a generic framework and a distributed architecture 
by proposing attack-resistant access control scheme, trust management scheme as 
well as the privacy-aware protocol for M2M in IoT. 
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3.8 Conclusion and future work 


The exponential growth of IoT in various domains in last few years leads to several 
threats and attacks. Unfortunately, IoT security has never been the central point of 
concern to researcher and developers. This chapter briefly discusses the threat anal- 
ysis along with attack modeling in IoT network, and also presents a comparative 
analysis of various techniques that are required to secure IoT communication. The 
layerwise protocols along with possible attacks and threats are also presented in 
this chapter. The comprehensive gap analysis of existing mechanisms with respect 
to various attacks is presented. This chapter elaborated the requirement that must 
be fulfilled to make IoT secure. 

In future, more efforts will be made to find out an optimum solution that resists 
multiple attacks at a time and to find out new opportunities in the field of IoT. In 
near future there is a need to develop lightweight algorithms that work in IoT net- 
work and prevent multiple attacks. 
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R. Thirukkumaran and P. Muthu Kannan 
4 Security issues and trust management 
schemes in Internet of things 


Abstract: Internet of things (IoT) is an emerging research field in the network do- 
main and is applied to almost all the applications that can change the people’s 
lives as smart. Moreover, in some cases, large volumes of sensitive data could be 
generated. The number of security threats related to infrastructure, platform and 
application of 1oT has been increased over the last few years. Hence, it is necessary 
to apply proper security solutions that ensure privacy and confidentiality of data. 
To address the secure and reliable communication, various trust-based solutions 
were introduced. Most of the nodes in IoT system are heterogeneous and have lim- 
ited storage space. Many of the existing trust-based solutions could not be able to 
achieve this requirement. This chapter provides a detailed review of the security 
challenges and trust management techniques adopted for IoT to secure data in 
a cloud environment. 


Keywords: Internet of things, M2M communication, threat analysis, IoT protocols, 
attacks 


4.1 Inroduction 


The term Internet of things (IoT) is very popular in current research and industrial 
development [1]. In IoT, all the “things” also called as objects will be connected 
cooperatively to provide seamless communication and smart services. This enables 
“things” that can be accessed from anywhere at any time. In the beginning, M2M 
(machine-to-machine) communication protocols were focused by many researchers 
in the field of IoT, which are entirely different from the general communication of 
network in the aspect of deployment environment and the characteristics [2]. Along 
with the basic principles of authorization, integrity, authentication, availability and 
confidentiality, the network and security and privacy of the information should be 
equipped. IoT would be a significant part of the economy in the world rather than 
the Internet. 

IoT is a technological revolution that has recently become more important to 
the real world as there are more than billion devices that connect to the Internet 
due to the growth of smart devices, embedded and ubiquitous communication tech- 
nologies. The main components of IoT are the sensor, actuator, network, platform, 
services and users. IoT devices are combined with the cyber world to provide many 
smart services for different application domains like agriculture, energy, health 
care, retail market, logistics and industrial process [3]. They generate large volumes 


https://doi.org/10.1515/9783110628517-005 


74 — R.Thirukkumaran and P. Muthu Kannan 


of data that are valuable but not protected due to the nature of device constraints. 
The wireless sensor network (WSN) is one of the most important parts of 1oT to col- 
lect data from end devices. 

IoT and big data analytics are the promising technologies that address next- 
generation intelligence for various applications [4]. IoT applications promise to 
bring immense values into our lives. With newer wireless networks, superior sen- 
sors and revolutionary computing capabilities, the IoT could be the next frontier in 
the race for its share of the wallet [5]. A growing portion of IoT devices will be cre- 
ated in future, which includes connected vehicles, home automation, wearable 
technology, connected health, health-care analytics, industrial automation, smart 
agriculture, environmental monitoring and appliances with remote monitoring ca- 
pabilities 16-81. 

The communication between the IoT devices, cloud platform and users should 
consider proper security solutions to protect data because the sensor devices have 
limited capacity of power, computation and memory. IoT-enabled services are par- 
ticularly creating and facing new challenges in security and privacy concerns. All 
the devices in the IoT are still subject to traditional security issues such as data con- 
fidentiality, integrity, availability and privacy. Intruders or attackers can target the 
data violation, bandwidth consuming and utilizing processing capacity of devices 
in the 1oT-enabled network. The designing of security measures in IoT is quite chal- 
lenging and should address the secure communication between sensor to sensor, 
the sensor to a gateway, gateway to server and server to the user. 


4.2 loT network components 


IoT is an emerging and fast developing technology that connects billions or trillions 
of heterogeneous devices. The transformation process of interfacing, objects and 
smart devices to the network in order to function proficiently and remotely is the 
main objective of 1oT. 1oT is visualized as a completely connected world that makes 
it possible to represent the real world in a digital manner. The network intercon- 
nected devices implanted in the physical environment to improve the existing pro- 
cess [9]. Figure 4.1 illustrates various components of IoT network. IoT application 
covers most of the real-world business market like smart cities, industries, smart 
health and smart logistics. 


4.2.1 loT device 


A sensor or an actuator along with the communication component constitutes an 
IoT device [10]. The principal component of IoT is sensor, which transmits the infor- 
mation gathered from the surrounding environment to the cloud server. There are 
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Figure 4.1: loT network components. 


numerous sensors available for various applications. Some of the usually utilized 
sensors are pressure sensor, sound sensor, temperature sensor, moisture sensor, 
light sensor, humidity sensor and others, in current and future applications. 
Sensors such as accelerometers are used for patient monitoring, biosensors for food 
testing, image sensor in surveillance, motion detectors in games and simulations. 

IoT devices can make decisions locally, after aggregation and filtration of the 
collected information whenever central or global control is not required, reducing 
the processing and data transmission. By nature, IoT devices are heterogeneous, 
which vary in terms of communication protocols, computational and storage 
capabilities. 


4.2.2 Connectivity 


Connectivity represents the medium through which the gathered information from 
the IoT device is sent to the cloud infrastructure. The communication protocols 
such as Wi-Fi, ZigBee, radiofrequency identification, near-field communication, cel- 
lular networks, Bluetooth, wide area networks and satellite networks can be used 
to transport the collected data from the sensor to the cloud infrastructure [11]. Low- 
power wireless technologies such as Bluetooth, Wi-Fi, LoRaVVAN and Z-Wave con- 
nect the smart devices and the sensors. Connectivity has its own advantages and 
disadvantages in terms of data transfer rate, efficiency and power. 
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4.2.3 Gateways 


The data traffic between protocols and various networks are managed by the IoT gate- 
way in a bidirectional manner. Gateway ensures the interoperability of the associated 
devices and sensors, also the translation of various network protocols. Configuration of 
the gateway includes the local preprocessing of the information gathered from a huge 
number of sensors before transmitting to the subsequent stages. In certain situations, it 
would be important due to the compatibility of the protocols such as Transmission 
Control Protocol (TCP) and Internet Protocol (IP). The information is transmitted 
through the IoT gateway ensuring network security with higher encryption standards. 
In order to protect the network from unauthorized access and malicious intruders, IoT 
gateway acts as a middle layer between the cloud and the devices. 


4.2.4 Cloud 


IoT generates large volume data from devices, applications, and users which must 
be managed in an efficient way. IoT cloud offers many service tools to collect, pro- 
cess, manage and store huge amount of data in real time [12]. It also provides 
a predictive analytics-based solution to enhance processes and products. To manage 
billions of devices and data traffic, IoT cloud is provisioned with high-performance 
server and storage. The application server, storage server, authentication and autho- 
rization server, message broker and 1oT platform are the main components in the 
IoT cloud. 


4.2.5 Services 


An application consists of single or multiple services. It monitors and collects data 
from IoT devices and manages to store data. Further, it handles user authentication 
and access control policies. For example, in the smart city application environment 
monitoring, smart parking, transport system and water monitoring are the main 
services [13]. 


4.2.6 Users 


User interface in the cloud environment provides the facility to interact user with 
the devices through different services [14]. By registering with different services, 
user can able to get the status of the devices and control it from anywhere. If any 
changes happened in the devices, the system generates alert and based on that 
user can react. 
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4.3 Security in loT 


In day-to-day life, the number of interconnected things drastically increases in vari- 
ous domains like industries, logistics, health and smart cities. More than 50 billions 
of interconnected devices are expected by 2020 [15]. Moreover, most of the IoT devi- 
ces are resource-constrained devices due to their limited processing, memory and 
battery resources. When IoT devices are connected to the Internet, they are more 
vulnerable to the malicious attackers than PC and smart phones [16]. IoT devices 
generate a huge amount of valuable data like user location, health details and 
home security details that are unsecured due to lack of proper security protection. 

IoT devices must authenticate themselves for each data communication be- 
tween the server. When the IoT device or user wants to connect to the network, it 
should correctly identify their identity and credentials to grant access for authoriza- 
tion [17]. IoT is an emerging and fast developing technology but has no proper refer- 
ence model and standards. It leads most of the security solutions that are not 
applicable to the IoT environment. New security solutions should be implemented 
to enhance the protection level of the IoT devices [18]. The explosion of the number 
of devices and users generates a large amount of data and it brings a new set of risk 
and security threats. The important challenges due to various technologies that 
drive and move forward the IoT into next level are discussed by Tan et al. [19]. 

Through the study of existing available resources, it has been clearly stated 
that IoT devices and users are severely affected by various security threats. Major 
security issues in IoT are the insecure network services, insecure web interface, in- 
secure mobile interface, insecure cloud interface, insufficient authentication, insuf- 
ficient authorization and lack of security configuration. Hence, it leads to a serious 
requirement for analyzing different security challenges in the IoT network. 

Proactive measures such as cryptography and authentication are implemented 
as a first-line defense method. These mechanisms effectively protect the attacks 
from outside the network but fail to detect them from inside the network. The reac- 
tive measures are detection mechanism that dynamically monitors and decides 
whether the events are normal or of an attack. This research focuses on the reactive 
mechanism. 


4.4 Security threats 


The number of security threats directly relates to IoT devices that have increased 
over the last years [20]. The threats and risks are listed in Table 4.1. It shows that 
attacks take place at different levels in the infrastructures and throughout the pro- 
cess involved in the IoT ecosystem. The major attacks and their impacts are dis- 
cussed in this section. 
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Table 4.1: Security threats and impacts. 


Threat loT 
device 


Malvvare v 


Platform 


v 


Infrastructure Data 


Communication 


Decision 


Application 


Exploit kits v 


x 


Targeted 
attacks 


DDoS v 


Counterfeit v 


Attacks on 
privacy 


Modification of 
data 


Man in the 
middle 


S 


Protocol 
hijacking 


Session 
hijacking 


Data 
interception 


Network 
reconnaissance 


Data gathering V/ 


Replay of 
messages 


< 


Data leakage VJ 


Software 
vulnerabilities 


Device 
modification 


V represents the impact; x the no impact 


4 Security issues and trust management schemes in Internet of things — 79 


4.4.1 loT attacks 
Against loT device 


This type of attackers modifies the configuration of sensors and actuators like 
generate out-of-range sensor values and changing the threshold value of the sen- 
sor to detect the event during installation time. Due to wireless nature, sensor net- 
work has led to the vulnerability of attacks either from inside or outside the 
networks. If one sensor were compromised, it could be identified by using the 
readings obtained from another sensor [21]. But in IoT, large number of sensors 
are deployed and attack also targeted to multiple devices at the same time. Packet 
dropper, data modifier, selfish node, Sybil, node replication, flooding, distributed 
denial of service (DDoS) and man in the middle are some of the attacks found in 
sensor networks [22-29]. 


Against server 


This type of attacker comprises different stages to gain the server admin control of 
an IoT system [30]. It can be easily achieved if a weak authentication method is 
used. An attack in IoT admin server could affect the communication between devi- 
ces and disabled the devices. 


Against the network link between controller and actuators 


The main impact of this type of attack is the leakage of sensitive and operational 
information. The advanced persistent threat (APT) attacks, eavesdropping and in- 
formation gathering are the types of attack that identify a weak spot in the network 
and devices and further it can able to do attack and malicious activities [31]. 


4.4.2 Method of attacks 
Exploits 


This type of exploitation is successful. It creates an entry point to the system and 
may crash the system, making it as the unstable one. These exploits are generated 
by malware and are used to get access to an unauthorized restricted system. It is 
worked as part of a larger attack and leads to launch of other malicious contents to 
the network. 


80 — R. Thirukkumaran and P. Muthu Kannan 


Command inject 


This type of attacker launches or injects command into IoT devices and executes 
malfunction remotely through a console. If one system is getting compromised 
through that machine, then the attacker is able to attack another system in the 
same environment. It creates a chain of multiple compromised devices. 


Steppingstone attack 


This is one of the anonymous attacks used by the intruders by hiding their identi- 
ties. In the first step, the attacker compromises some nodes in the network. Then by 
using that compromised node identity, attacker moves a step forward to attack an- 
other set of nodes in the network. Further, this process is continued to attack the 
entire network. 


loT botnet 


This type of attack finds the list of vulnerable devices in 1oT by sending exploits 
and enrolling them into botnet after that it launches a DDoS attack, flooding attack, 
and targets the server with malicious traffic [32]. 


Ransomware 


It has many possible targets within the 1oT through malware patching into the sys- 
tem. This type of attack blocks the access of data from the victim and also its re- 
quest to pay for access grant. It can able to hold a power grid, a smart thermostat 
and a hospital system, and makes the risk for the safety of the people [33]. 


4.4.3 Security challenges in loT 


Security is a very important aspect as well as a challenge for implementing IoT sol- 
utions, rather than considering the benefit of IoT, where inappropriate access and 
privacy are the main categories of the top list [34]. Moreover, it is necessary to main- 
tain proper authorization because these devices are open networks in which any 
device can join and communicate with any other devices [35]. With the adoption of 
new technologies, the IoT environment has become complex, and privacy issues 
have become more complicated [36]. Furthermore, because of terminal equipment, 
network structure, scene and other factors of IoT, these concerns are rising, 
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respectively 1371. Moreover, vvith a traditional firevvall or authentication, protocols 
or keychain pair might not offer a solution [38]. 

From the aspect of security and technology, the safety of IoT especially accesses 
control of miniaturized things that have become the most challenging one. Hence, 
the access control system (ACS) design will address features such as a solution to 
eradicate the threats of privacy and security, related with IoT, the solution to protect 
security [39]. Most of the existing access control methods are based on role-based ac- 
cess control (RBAC), attribute-based access control (ABAC) and access control list 
(ACL) [40]. 

ACS allows accessing resources like IoT device, sensor or URL file only for 
authorized users [41]. Due to lower bandwidth in IoT devices, low power 
requirements, ad hoc and distributed systems nature, a unique set of access con- 
trol challenges are increasing. The standard authorization models must be ana- 
lyzed in depth before applying them to the IoT. 

The role of wireless infrastructure in IoT applications is expected to become more 
prominent with the deployment of mobile nodes and WSNs [42]. If the WSNs are 
being open to Internet connectivity, it becomes more vulnerable to attackers from 
anywhere in the world [43].The important challenges due to various technologies 
that drive and move forward the IoT into next level are discussed in this section [44]. 


Availability 


To achieve persistent connectivity between end devices, users and their respective 
services, new technologies have to be designed [45]. The power constraints of light- 
weight endpoints should be addressed in secure communication. Low-power wide 
area network should be implemented with the same level of security used in recent 
mobile communication [46]. During the migration of the IoT endpoints across net- 
work boundaries, the same level of security should be supported by the multiple 
mobile operators [47], which need to address how the network trust can be for- 
warded from gateway to endpoint communication. 


Identity 


In an IoT product or service echo system end-point device should be securely 
identify itself to its peers and services. This is a critical and fundamental aspect to 
guarantee the data is being delivered to the certified peers and services [48]. In 
IoT environment services and peers should verify the identity of the end-user and 
end-point device. Focusing security technology should be capable of securely au- 
thenticating peers and services. The identity of a device should be secured from 
tampering and manipulation. 
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Privacy 


Privacy must be designed to ensure that each action is authorized, device iden- 
tity is verified, and the data are not exposed to unauthorized users [49]. All the 
physical world entities are directly affected by digital world actions. It should be 
considered during the design of the architecture of the endpoint device or 
service. 


Scalability 


Scalability is defined as that increase in the number of nodes after the deployment 
of WSN [50]. The expansion support of the networking protocol is very important in 
the design of the protocol. The design of the services, protocols and the endpoint 
devices should ensure that they are scalable under varying load conditions. 


Secure routing 


Routing and data forwarding is an important service for allowing communication in 
WSNs and IoT [51]. Existing routing protocols suffer from several security 
vulnerabilities. 

To overcome different security threats in the 1oT network, the trust-based mech- 
anism is developed; hence, the next section provides a detailed review of existing 
trust-based security mechanism adopted in IoT 


4.5 Trust management in loT 


This section briefs the existing trust management (TM) schemes and their related 
application. Further, the challenges in trust-based security solutions and the out- 
come of this survey are outlined. 


4.5.1 Trust management 


TM plays a vital role in IoT for enhanced user information security and privacy, for 
the process of data fusion and data mining and for the qualified data services with 
intelligence, whereas reputation is a measure to assess the trust level which is put 
into an entity that is derived from the experiences or knowledge (direct or indirect) 
on earlier interactions of entities [52]. 
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Trust 


The behavior of the node or data is classified as good or bad based on the trust 
value. A trustor and a trustee are the two entities involved in a trust relationship, 
and for mutual benefits, they rely on each other. The relationship of trust resides in 
the context such as the trust environment, the purpose of the trust, and the risk of 
trust [53]. 


Direct trust 


Direct trust is a technique which is based on experiences or observations, direct inter- 
actions between the two entities that are the trustor node and the trustee node [54]. 


Indirect trust 


In indirect trust, there are no past interactions or experiences for the trustor and the 
trustee. In such a scenario, based on the recommendations and opinion of the other 
nodes trust is built [55]. Indirect trust can be established if a subject node cannot 
directly observe the communication behaviors of the object node. 


Recommended trust 


Recommended trust calculates filtered reliable recommendations. The third-party 
recommendations are not reliable. Therefore, an effective solution needs to be ad- 
dressed to detect and filter unreliable recommendations [56]. 


4.5.2 Trust management model 


Most of the existing work calculates the trust value based on node behavior. In the 
wireless multihop environment, cooperation among neighbor nodes is important. 
The various applications of trust-based solution for the wireless environment are 
data aggregation, routing, node selection, localization and malicious attacker de- 
tection. Based on the management scheme, trust models can be classified into cen- 
tralized and distributed. In the distributed approaches, all the participating nodes 
can be able to calculate their trust values. The base station or any server is used to 
calculate the trust value for all nodes in the centralized approach. This approach 
may not be suitable for all applications because this management consumes more 
energy. In the IoT context, both distributed and centralized approaches can be used 
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in the different level, The distributed approach is used for device-device communi- 
cation and centralized approach is used in the user ACS [57]. 

Several studies developed TM models to enhance security and privacy but based 
on the architecture modeling of IoT [58]. This research splits IoT into three layers 
based on the network composition of 1oT, namely the application layer, the core 
layer, and the sensor layer. TM mechanism is deployed in these layers for multiser- 
vice, effective routing and malicious detection [59]. The selection of metrics is based 
on the kind of attacks that we are going to defend. In each layer different metrics are 
collected for trust calculation. The selection of a computing method is also an impor- 
tant one. Some of the methods are a weighted average method, probability theory, 
fuzzy logic, game theory and machine learning concepts. The trusted authority or 
ACS is responsible for taking the final decision based on trust information. 


4.5.3 Trust-based applications 


TM scheme provides solutions for security issues in routing, clustering, target local- 
ization, malicious node detection and ACS. In this section, applications of trust 
model are discussed. 


Routing 


Routing is generally carried in IoT for the sensor network, which is used for multi- 
hop communication [60]. From the sensor devices, data should be forwarded 
through intermediate nodes to the base station or gateway. Presence of malicious 
nodes in the network causes the routing behavior. This section discusses the imple- 
mentation of secure routing through TM scheme. 

Airehrour et al. [61] introduced a lightweight trust-based routing framework 
called SecTrust. The trust value is calculated based on the past successful interac- 
tions of the IoT device communication. Based on the trustworthiness, routing at- 
tackers are isolated from the network. 

Khan et al. [62] illustrated a resilient routing mechanism for low power and 
lossy network using the trust. Each node in the network computes trust value using 
trust metrics like belief, disbelief and uncertainty. 


Cluster 
The IoT devices are grouped together to form a cluster. The clustering method pro- 


vides an efficient way to forward data from devices to base station or gateway. 
Cluster-based techniques in IoT achieve energy efficient by minimizing the number of 
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control packets used in network communication. The selection of cluster head (CH) is 
challenging in terms of selection parameter and selection method. Many techniques 
vvere proposed to select CH and cluster member (CM) assignment. The CH selections 
are broadly classified as centralized and distributed. In 1oT context distributed 
approach gives good performance [63]. CM senses the environment and sends the 
information to CH. Further, it forwards to base station or gateway in most of the IoT- 
enabled WSN application scenario. Many trust-based solutions and access control 
methods are proposed for secured communication [64]. The objective of secure, en- 
ergy and bandwidth-aware CH selection is not addressed by many of the research 
work. In general, CH is elected based on node degree, delay, distance and energy. 

Rani et al. [65] illustrated a minimum energy consumption chain-based cluster 
coordinator algorithm (ME-CBCCP) for the energy-efficient 1oT. A hierarchical net- 
work design was introduced based on different communication levels like local 
cluster communication, intercluster communication and cluster-to-base station 
communication. The cluster coordinators balance the load of the CH. The network 
lifetime and delay performance of the ME-CBCCP were analyzed. 

Tsai and Chen [66] presented virtual CH election method for the WSN. By apply- 
ing virtual ID concept, it avoids nearby CHs and also fully covers all cluster nodes. 
For energy-efficient CH election highest residual energy parameter is also consid- 
ered. The performance analysis carried in terms of the number of live nodes, energy 
consumption and the number of CH elected. 

Praveen Kumar Reddy and Rajasekhara Babu [67] demonstrated the CH election 
method using the combination of gravitational search algorithm and artificial bee 
colony algorithm for the IoT-enabled WSN. It takes the distance, delay, energy, 
load and temperature parameters of the sensor devices to select the CH. The perfor- 
mance of this algorithm analyzed in terms of network sustainability and conver- 
gence evaluation. 

John et al. [68] introduced a dynamic CH election method for IoT applications. 
The large-scale network area is divided into small clusters with a minimum cover- 
age area by using the Voronoi diagram. The CH is selected at two stages. First one 
is based on perceived probability and the second one is based on survival time esti- 
mation method. The performance analysis shows the improvement in energy sav- 
ings and network lifetime. 

Karthick [69] demonstrated a secure and energy-aware routing protocol for the 
WSN. At the initial stage, k-means clustering is used later on based on link quality 
appraisal parameter of nodes’ grade points. By using trust and distrust concept, se- 
cure path is established. The performance of the proposed system is analyzed in 
terms of throughput, delay and energy consumption. 

Bader et al. [70] presented a CH selection scheme for IoT-enabled sensor net- 
work by using trust value. Only the trusted nodes were selected as CH. The trust 
value is computed based on successful interaction. The forgetting factor is used to 
assign a different weight value for old entries in the history. 
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Secure localization 


Target localization and tracking is an important application for 1oT. To track the 
exact location of the moving obiect and to find the event-generated position are 
challenging one. The location spoofing attacks are the major risk of implementing 
localization in IoT. The localization method utilizes the reference position informa- 
tion from the neighbor nodes. If the reference node is a malicious node, then the 
result of the localization will get an error. Several existing methods are proposed to 
avoid malicious nodes. This section discusses some of the secure localization meth- 
ods used in IoT environment. 

Zhang et al. [71] demonstrated secure localization using a trust evaluation 
method called trust-based secure localization. Final trust value is computed based 
on identity and behavior. The identity is evaluated based on an authentication 
method. If the authentication fails, the parameter is set to zero. The behavior evalu- 
ation parameter is calculated by using both self-evaluation and reference evalua- 
tion method. It uses transmission radius of the beacon node and distance between 
the position claimed node and the position estimated node. For the attackers, the 
final trust value will be low. To find the localization of the node, the reference loca- 
tion information is gathered from trustworthy nodes. This method ensures the se- 
cure location information. 

Chen et al. [72] presented a detailed survey about security and privacy issues in 
localization, location information and location-based services. Cryptographic solu- 
tions were addressed to secure localization. 

Zhang et al. [73] presented the framework of secure location of things for geo- 
spatial tagging in the IoT. Further, the impact of spoofing attacks in traditional lo- 
calization algorithm was analyzed. Based on the reachability of access point the 
suitability information is scored. This algorithm calculates the maximum likelihood 
estimator to find the tag location. 


Access control system 


ACS allows accessing resources like sensors, actuators, medical equipment and 
data in the server only for authorized users. Due to lower bandwidth between the 
Internet and IoT devices, low power requirements of IoT devices, network ad hoc, 
systems distributed nature, a unique set of access control challenges are presented 
by IoT. The standard authorization models must be analyzed in depth before apply- 
ing them to the IoT, which includes RBAC, ABAC and ACL. 

Mahalle et al. [74] presented trust-based access control using the fuzzy approach 
based on identity management using the trust level. To address access control in IoT, 
the fuzzy-based approach for trust calculations deals with the linguistic information 
of devices. Simulation results demonstrate that the fuzzy approach for trust-based 
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access control guarantees scalability and it is energy efficient. Finally, the most im- 
portant works that emphasize access control in an loT environment are discussed. 

Yeh et al. [75] developed a technique of cloud-based fine-grained in health care 
for access control using lightweight IoT devices with attribute revocation functions 
and data dynamics auditing. This proposed scheme handles the problem of cloud 
reciprocity, wherein cloud service providers reduce the amount of data loss that oc- 
curs in the network system. Experimental analysis of the results shows that the pro- 
posed approach exhibits significant security analysis and performance comparisons, 
which makes it an excellent design for cloud-based PHI system. 

Authorized users of each resource are stored by the ACL, that is, the matrix of 
access control that stores in a row-wise order. This is a major challenge for IoT be- 
cause it is hard to update the user list in a distributed system due to low processing 
power in devices [76]. 

A widely used protocol is an RBAC system that designs and builds access con- 
trol. It provides security for the system regarding authorization, but the ACS and 
authentication provide critical functionalities even in the Internet resource access. 
Further, there are three perspectives of role-based access model such as the end 
user, access control and administrator [77]. 

A different approach to authorization is provided by ABAC as it provides access 
based on specific attributes of the user [78]. By combining both attributes and other 
data such as Mac address, the location and IP address, this method provides 
a better ACS. It combines various attributes to make a context-aware decision in- 
stead of using an authorized user role for a sensor at runtime [79]. 


4.5.4 Challenges in trust-based security solutions 


Trust and reputation system face some of the challenges such as heterogeneity, 
scalability, infrastructure, identity, integrity, and network resources. 

Trust and reputation systems must consider the heterogeneity as the first chal- 
lenge. Because the future Internet will exhibit high heterogeneity levels like web- 
enabled, digital virtual and cyber-physical [80]. The second challenge is scalability. 
To stay fully functional, the trust and reputation system must scale with the growth 
in the number of devices [81]. Trust and reputation systems must consider infra- 
structure as the third challenge. Because it collects information from the public 
area. Most of the entities need others to interact with them and also they must be 
able to find them within the network [82]. Both challenges and the opportunity to 
improve security are offered by identity management in IoT [83]. The underlying 
mechanism and identity of things are not the same, and it is the most important 
aspect of this challenge [84]. 

The prevention of unauthorized modification to hardware and software is en- 
sured by the concept of integrity. Authorized or unauthorized personnel does not 
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do an unauthorized modification of data, and that data should be internally and 
externally consistent [85]. The last challenge is exhibited from connections of vari- 
ous things and different netvvork capabilities 1861. This means that bandvvidth, 
availability and the latency difference must be considered especially if certain as- 
pects of the interactions are critical in a time. 


4.5.5 The outcome of the survey 


To design efficient trust-based security solution, the following set of points needed 
to be considered: 

Trust model should be lightweight and easy to implement. Trustworthiness of 
the nodes should be continuously updated. If the numbers of interactions between 
the nodes are increased, the trust value can be able to achieve a good level of accu- 
racy. For the recommendation approaches, we need to select proper filtering and 
aggregation models to remove unwanted recommendation. Trust model should con- 
sider different attacks. Need more flexibility to integrate data trust, device trust and 
user trust based on the application use-case. 


4.6 Conclusion 


To protect the data in an IoT network, TM scheme has been widely used and hence 
this review examines the TM scheme for securing data in the IoT in different as- 
pects. The chapter reveals that even though the TM scheme provides a significant 
advantage for various threats, yet it requires some effective modification. 
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5 Users” privacy at online social netvvorks in 
Indian context: comprehensive multiaged 
group survey and discussion 


Abstract: Novvadays, social media has become an important part of life. People 
across the world use social media for random purposes. They post their accomplish- 
ments, achievements, vacation photos and others on the social media. Hovvever, 
they do not often realize that they are attracting very serious incidents that can 
occur due to their posts. Online privacy is one of the crucial points to safeguard our 
personal information. However, protecting privacy in online social networks (OSNs) 
is challenging as OSNs follow the strategy “Take it or Leave it.” Users need to pro- 
vide information asked by the service providers in order to use the OSNs that may 
lead to compromise the users’ data privacy. 

To provide privacy-aware OSNs it is important to know user’s awareness 
about privacy. To achieve this, survey is conducted and from analysis of survey the 
user’s awareness and requirements of privacy-aware mechanism is presented in this 
chapter. Survey analysis shows that users of OSNs required to have trusted third party 
to manage their preferences and attributes to protect their privacy. Furthermore, user 
required new privacy law in Indian context and they need to hide their identity on 
OSNs. 


Keywords: Online social network security, user data privacy, user identity privacy 


5.1 Introduction 


In today’s era of online social networks (OSNs), everything we can find online start- 
ing from entertainment to business. But this availability also gives rise to one of the 
important aspects, that is, privacy [1-3]. 

Social network services and its popularity are widely spreading, where all age 
users are being attracted to it across the world. Reasons for using social network 
may vary like relationships, interests, friendship, knowledge or other social rea- 
sons. Popular examples of social networking sites (SNSs) used worldwide include 
Facebook, Twitter and LinkedIn [4]. This openness raises risks of vulnerabilities, 
data breaches and compliance violation. Also lack of regulation and standardiza- 
tion brings more opportunity for hackers to live and spread attacks in OSNs. It is 
the newest platform for security attacks. 

Now with social networks, everyone is aware of the value of information being 
placed online as “data is money.” People with profit motives or political agendas 
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are few of the main causes for the attacks on data confidentiality. Service providers 
(SPs) may misuse users” data for advertisements and may sell these data to third 
party without their consent, for example, Facebook data is misused by Cambridge 
Analytica for US president elections [5]. 

Currently, the effectiveness of security policies considering data leakage is an 
important concern to society. Social security sites do provide security mechanism 
but not seem to provide a way to stop privacy compromising. 

There is a need of security mechanism for protecting use’s’ sensitive data 
shared on ONSs and there should be a method to bargain for users’ data sharing 
instead of “Take it or Leave it” strategy. Successively, we can say that there is 
a need to develop a mechanism for protecting user’s sensitive data shared on OSNs. 


5.2 Motivation 


Nowadays, social media has become an important part of life. People across the 
world use social media for random purposes. They post their accomplishments, 
achievements, vacation photos and others on the social media. However, they do 
not often realize that they are attracting very serious incidents that can occur due to 
their posts. Furthermore, to use location-aware services, users share their location 
with their SPs so that they can lead to compromise their privacy. These incidents 
can potentially put themselves and everyone around them in potential danger. 

A serious incident happened because of the post. There was a woman who 
used social media very extensively. She used to post every now and then on social 
platform. 

The incident happened on one uneventful afternoon. She was at home with her 
husband when armed burglars broke into their home. They stole huge amount of 
cash along with some personal gadgets. 

After the robbery when police started their investigation, a fact came into light 
that the woman in question had posted photos of herself with huge amount of cash 
on social media. This woman is the wife of CEO of the construction firm, having 
turnover in crores. She is shopaholic and net-freak. She frequently uploads her ac- 
tivities and photos of her family on Facebook and other OSNs. Robbers understood 
about her financial and family background with analysis of her pattern of uploads. 
After post robbers took advantage of the situation and planned the heist. She and 
her husband were planning for some vacation, so for that purpose she had taken 
that money out of the bank. 

In this scenario, the woman is not aware about people viewing her personal 
data like marital status, kids’ age, school, photos and many more. 

From the above and many more other scenarios shown in Figure 5.1, we can 
say that there is a need to make people aware about the importance of privacy and 
how to achieve it as a fact that OSNs cannot say everything is ok and full proof by 
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Recent string of celebrity home burglaries linked to 
social media posts: Police 


Infographic: 80% of robbers check Twitter, 
Facebook, Google Street View 


Figure 5.1: Consequences of privacy leakage in OSNs. 

Note: https://www.zdnet.com/article/infographic-80-of-robbers-check-twitter-facebook-google- 
street-view/ 
https://theweek.com/speedreads/455792/familys-home-burglarized-after-post-vacation-photos- 
facebook 

https://www.myrtlebeachonline.com/news/local/crime/article223765610.html 
https://www.springfieldnewssun.com/news/local/criminals-use-social-media-choosing-their-victims 
/7z\vddM93fSEuVTe1Be9X1/ 


just securing server systems and application on servers [which are hosted by social 
network sites (SNSs)], underneath awareness about privacy is also important 
(which is not in OSN’s control). 

Other issues with OSNs are data stored by OSNs may be misused by the third 
party for advertisement or business growth or some other personal benefits/crimes. 
Today’s third party has far more resources available to facilitate an attack and it 
has greater technical depth, focus plus it is well funded and is better organized. 

Moreover, as end user communicates to server, end user’s device security also 
becomes important (again this is not in SNS’s hand). If user’s device is with weak 
security mechanisms, then attack on data confidentiality is possible. Let’s go one 
step ahead, assume user’s device is safe but if user’s knowledge is weak about 
data sharing and there comes possibility of misuse of user’s data. There are fair 
chances that user identity attack will succeed here and start damaging user’s 
privacy. 

Also, at present there is no centralized mechanism directly available that will 
increase collaboration between SNSs, users and security teams to set standards or 
guidelines for preventing and reducing attacks on user’s privacy. This is because 
social sites have different priorities and users have different priorities. 
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Consequently, from literature work we can say that there is a need to research 
mechanism for user identity protection and data confidentiality on OSNs to analyze 
behavioral modeling of most possible attacks to provide a solution set in near future. 


5.3 Related vvork 


Analysis of different privacy and security risks is presented by Fire et al. [6], due to 
users’ unawareness about privacy and security settings they share their personal 
information on OSNs may put them in risk. The different types of threats presented 
in this chapter are, for example, clickjacking, anonymization attack, fake profiles, 
identity clone attacks, inference attacks, information leakage, location leakage, soc- 
ware, online predators, cyberbullying. Few recommendations for protecting their 
privacy are suggested like removing unnecessary information shared on OSNs, ad- 
just privacy and security settings of OSNs account, not to accept friend requests 
from strangers, install Internet security software, remove installed third-party appli- 
cations, not to publish location, not to trust on friends on OSNs and to keep eye on 
children’s OSN activities. 

The attacks on OSNs are categorized as attacks on users and attacks on OSNs 
by Kayes and Lamnitchi [7]. Inference/de-anonymization attacks, attacks from 
other users, OSNs are categorized as attacks on users. Sybil attack, crawling at- 
tacks, social spam and distributed denial of service attack and malware attacks are 
considered as attacks on OSNs. The procedure of attack launch and defense techni- 
ques is presented in this work. 

Comprehensive survey of personal information disclosure by members while 
joining OSNs especially Facebook, Instagram, Twitter and Snapchat is done by 
Aljohani et al. [8]. The analysis is done on the data collected in duration of 3 
months, with 30 different questions and over 500 responses. The analysis con- 
cludes that in general people disclose their gender, name, age and education very 
frequently. Survey results show that the friend requests are accepted without know- 
ing the person 50% of times. The privacy setting “only visible to friends” doesn’t 
make any sense in such scenarios. 

Survey of privacy risks and challenges of OSNs, cloud and big data are pre- 
sented rigorously in the literature [9-19]. In these research works, different attacks 
on OSNs and their solutions are presented. 

The effect of understanding of privacy setting and policies on the information 
disclosure on OSNs is presented by Fred et al. [20]. The survey is taken from 122 
Facebook users. This survey shows that after reading privacy policy the information 
disclosure can be reduced as users are aware about the importance of privacy of 
their personal information. 

Survey of Facebook users aged 18-29 is taken by Madejski et al. [21], to under- 
stand the awareness of users about privacy settings of Facebook. The survey results 
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shovv that 4406 users take efforts to limit their personal information disclosure, 
About 71% users have changed their privacy settings and 47% users take actions 
like deleting unwanted comments to keep privacy. 

In digital era, use of android apps increases in large number; however, using 
android apps may lead to privacy leakage as at the time of installation of apps, 
users unwillingly allow access to their smart phone camera, contact list, micro- 
phone and so on. Li et al. [22] presented intercomponent communication taint anal- 
ysis tool to protect the privacy of android users. 

Savla and Martino [23] have carried out survey about privacy. It is based on 35 
OSNSs that are used frequently in the United States. Survey shows that the users’ 
privacy is at risk if the privacy policies are not implemented as per standards. 
Another survey carried out at countries like Saudi Arabia [24], UK [25] and India 
[26-27], survey shows that to protect privacy of OSNs there is a need to understand 
users’ view about SPs and policies. 

Zeadally and Winkler [28] carried out a survey to understand users’ knowledge 
and awareness of the privacy policy. Facebook, LinkedIn, Twitter and others are se- 
lected for this survey, Findings of this survey state that people doesn’t understand 
what they agree while registering membership on such OSNs. 

From related works mentioned earlier, we can conclude that privacy surveys 
are done mainly in developed countries and they are in initial phases in country 
like India. Surveys taken in related works focus on participants who are of middle 
age; however, nowadays youngsters spend most of their time on OSNs, which is 
making necessary to research privacy issues in Indian context and it should be 
more focused on lower age group participants. Therefore, this research provides de- 
tails of users’ awareness about privacy in Indian context. 


5.4 Issues and challenges 


In this section we will discuss issues and challenges to provide privacy-aware se- 
cure access to OSNs. An architecture to provide secure and privacy-aware OSNs 
could face different challenges as today’s technoworld is heterogeneous and scal- 
able. Security and privacy algorithms need to support these heterogeneity and scal- 
ability. From the above discussion of literature and gap analysis, OSN system 
requirements, few challenges are mentioned below: 

- Heterogeneity: Devices that are involved in OSNs are different in computational 
capabilities, information format, connectivity and many more. Performance of 
the security and privacy algorithms may vary with such heterogeneity. 

- Scalability: As aforementioned, number of people using OSNs has increased 
tremendously and will continue to increase in the future. The privacy algo- 
rithms must perform best with such scalable environment. 
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— Awareness: Users need to accept policies with terms and conditions about shar- 
ing their personal data before accessing services of OSNs. SP asks these infor- 
mation for their business betterment, hovvever, users may not be avvare of 
“why, how and where their personal data being used.” Due to personal data 
sharing with the SP could possibly result in the infringement of privacy rights. 
People using OSNs are not aware of the fact that their personal data is used by 
the third party and moreover they not aware about consequences of privacy 
leakage. Hence, users should be made aware about privacy policies and their 
right to protect personal data. 

- Standardization: Standards are not being used for protecting users’ privacy on 
OSNs, and lack of standardization is a major issue faced by OSNs. 

- Policy interpretation: Reading and understanding of privacy policies is difficult 
for users of OSNs. There is a need to have understandable way to provide in- 
sight of privacy policies. 

- Attribute negotiation: SP asks personal attribute for usage of OSNs. Users need 
to share all attributes asked by SPs. However, for protecting privacy, there 
should be facility of attribute negotiation. Thus, selection of basis of attribute 
negotiation is very challenging as users and SPs viewpoint about sharing infor- 
mation are contradictory to each other. 


5.5 Proposed work 


Quantitative analysis can be the best way to understand users’ awareness about pri- 
vacy. We have conducted survey of Indian people of different age groups, different 
educational backgrounds and different work cultures. This survey was intended to 
learn about users’ activities, practices on OSNs, knowledge about privacy policies, 
laws related to privacy and what is missing in current privacy mechanisms. 

In the survey, we have formatted questionnaire in such a way that participants’ 
responses will provide their suggestions and opinions about the type of privacy 
mechanism they wish to have with OSNs. A total of “47” questions are prepared, 
and these questions are formed in such a way that any layman can understand. We 
tried to make survey as simple as possible and users are selected randomly for sur- 
vey as per principles of the survey [29]. Survey is done online using Google form, 
and this form is sent to the participants via email. Method of online collection of 
responses is used in survey instead of the off-line method to save time of the survey. 
Few assumptions are made while survey like participants are excited to give survey, 
they were honest and gave responses voluntarily. 

The questions are formed in such a way to understand users’ viewpoint about 
what is privacy?, How user’s information get compromised?, Why SPs steal users’ 
information?, What benefits SPs are getting by stealing users’ information?, What 
actions should be taken by the user to protect their personal information? and 
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Where user should seek for help if information compromised?. It is depicted in 
Figure 5.2. These questions are categorized in six sections. The first section, that is, 
introduction, we formalized this section to know details of participants like age, sta- 
tus as whether working or student, from where they access OSNs and which type of 
online facility they use. The second section of questionnaire is targeted to know par- 
ticipants awareness about online privacy like, which information is recorded by the 
SPs, what happens further with these information, what is SPs aim to collect these 
data and so on. Third and fourth section questions are related to know participants 
awareness about privacy laws and agencies, and what individuals will do if their pri- 
vacy compromised. In section five, questions are formed to understand participants’ 
expectations from SPs about the privacy of their data. related to SPs. In this digital 
era, people are using Internet to use health facilities with the help of the Internet of 
things, section six questions are focused to know about users’ understanding about 
the privacy of their health parameters that they share through Internet. 


What is How it gets Why it 
privacy? compromised? happens? 


Figure 5.2: Overview of questionnaire. 


5.6 Results and discussion 


As aforementioned, for unbiased analysis survey is taken for users with different 
educational background, different working culture and different age groups, which 
is depicted in Figure 5.3. A total of 671 responses have been received; among which 
55.3 (371)% were males and 44.7% (300) were female users who participated. 
Among 671 participants 42.3% (283) participants consider themselves as very new 
to computer field, that is, having less knowledge of computer field, 45% (301) par- 
ticipants see themselves as having satisfactory knowledge about computers and 
only 12.7% (85) claim them as experts in the computer field. This analysis shows 
that very few people know about risks that may happen while handling Internet as 
only 12.7% participants are expert in computer and Internet field. 

In the survey, few questions are formed to know details like from where partic- 
ipants access Internet, what is the purpose of accessing Internet and how much 
work they get it done using Internet. The survey analysis shows that the common 
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General 
information 
671 responses 


Gender Expertise in Age 
computer field 


D o, 
Male: 55.3% Below 16: 45.1% 


Beginners: 42.3% 17-35: 52.496 
Female: 44.7% Intermediate: 45% 36-55: 12% 
Expert: 12.7% Above 55: 0.7% 


Figure 5.3: General information about survey. 


answer was that participants (i.e., 87.8%, Q5) access Internet at home, office, col- 
lege and school, and only 12.2% participants access Internet from cybercafé and 
other places. The survey shows that 58.3% people use Internet for online shopping 
and 72.9% people use it for OSNs and search engines. Only 32.6% [Q.6] participants 
use Internet for other works than online shopping and OSNs. This analysis shows 
the increasing popularity of OSNs. 


5.6.1 Which information may leak while using Internet/OSNs? 


We tried to understand participants’ response on question-related information leak- 
age, that is, Q9. As per your knowledge, response to the question “Which informa- 
tion is recorded by server while you are online?” is shown in Figure 5.4. It is 
observed that majority of participants, that is, 65%, 62%, 52.5% think that email id, 


Your machine address 349 (52.4%) 


141 (21.2%) 


Your residential address 

Email id 439 (65.9%) 
Date and time of usage 392 (58.9%) 
Requested page 308 (46.2%) 
Type of browser 303 (45.5%) 


192 (28.8%) 


Present operating system 


Monitor 68 (10.2%) 


Your location 412 (61.9%) 


0 100 200 300 400 500 


Figure 5.4: Analysis of types of information leakage. 
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location and machine address may be stored by SPs, respectively. However, in real- 
ity more information stored and fetched by SPs and response shows that partici- 
pants may not be aware about this. 


5.6.2 Why privacy get compromised? 


In question 11, we tried to know participants’ views about information leakage by 
SPs, question formed as “Q.11 What would you think about the primary usage of 
collecting personal information by service providers?” 52.3% participants thought 
that SPs steal users’ data for analysis purpose that could be further used for recom- 
mendation systems, few people thought that SPs store users’ data for detection of 
fraud, case studies and for implementation of new laws, depicted in pie chart, that 
is, Figure 5.5. These responses show that people are not aware of the fact why data 
is stored and used by SPs. 


@ Case study 

@ Analysis of users 

@ Detection of fraud 

@ New law implementation 


Figure 5.5: Analysis of users’ responses: reasons of privacy compromise. 


5.6.3 How privacy gets compromised? 


Privacy may be compromised due to fact that most of the people are not aware that 
they are providing personal information online, without knowing what can be done 
with their data. This may lead to harm their privacy and, furthermore, people are 
not even aware about consequences of privacy leakage. 

In sequel to this, few questions of survey are formed to know users’ views 
about privacy leakage, which is depicted in Table 5.1. Most of the people share 
their data online without thinking protection of their personal information. 
Analysis of survey shows that 72% people frequently share their data<Q15/> 
and furthermore 23.8% people even don’t know the consequences of privacy 
leakage [16]. 
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Table 5.1: Analysis of users” responses: avvareness about data sharing. 


Question Response 


015. In general, have you frequently shared your 7296 people shared their personal 
personal information vvith organizations that they ask information online. 
for it? 


016. Are you aware of consequences if your privacy is 23.8% people are not aware about the 


compromised? consequences of privacy leakage. 

Q18. Have you ever asked an organization that Most of people, that is, 52.1% people 
requested personal information from you “why they never asked any question while sharing 
want it” and “what they will do with it”? their personal information. 


Q34. How regularly do you read the privacy policies of Only 15.1% people read privacy policies 
websites/service providers you visit/doing regularly while registering online. 
registration? 


Q35. Do you think that the privacy policy is very Among those who read privacy policies, 
lengthy, unable to understand and descriptive? 77.1% people think it is very lengthy and 
not in understandable format. 


5.6.4 Whom to ask if privacy gets compromised? 


Privacy of personal data is an important issue in this digital era as we frequently 
share data on OSNs, assuming that third parties, SPs, are trusted. However, this is 
not the reality that privacy may compromise if these are not trusted; hence, users 
should be aware what steps they should take if privacy gets compromised. In the 
survey, few questions are formed to know users’ awareness about actions that they 
should take if privacy gets compromised, which is depicted in Table 5.2. The analy- 
sis shows that 61.6% people are even not aware about privacy law in India [Q.12] 
and 59.3% people never take any action to protect their data [Q.24]. 


5.6.5 How and why to protect privacy 


Nowadays, people use OSNs and Internet frequently. Survey analysis shows that 
40% people do their 80% work like banking, shopping and so on using online serv- 
ices. People think life will be easier using online services as in Q.7, and 96.3% peo- 
ple say that online service made their life easier; however, this is one side of the 
coin. Other side is that, to use these facilities they need to share their personal data 
and accept terms and condition that may lead to compromise their personal data. 
SPs are using “Take it or Leave it” approach, which needed to be changed. There 
should be some mechanism by way that an users can use online facilities without 
losing their data privacy [Q.25, Q.31]. There should be new privacy laws to protect 
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Table 5.2: Analysis of users’ responses: awareness about privacy law. 


Question Response 


Q24. Do you personally take any steps/actions 38.5% people never took any action to protect 


to limit tracking of your Internet/online their privacy. 

activities? 

Q14. Have you ever actively hunted out for Most of the people, that is, 59.3% didn’t search 
information about your privacy rights, for any help to protect their privacy. 


example, by visiting a website searching on the 
Internet contacting an agency/organization or 
reviewing a standard publication for help? 


Q12. Are you aware of any federal institutions/ 61.6% people are not aware about privacy law 
law that help Indians to deal with privacy and that can help to protect their privacy. 

the protection of personal information from 

wrong collection use and exposing publicly? 


Q38. Where do you ask the question if security/ Majority of the participants (55.4%) respond 

privacy is breached? that they will take help from security specialist 
and system admin, and very few participants 
(30%) choose to take help from government 
agencies. 


privacy as once people are aware about consequences of privacy leakage, people 
may think not to use online services on cost of privacy [Q. 22, Q.28], which is listed 
in Table 5.3. 


5.7 Conclusion and future work 


Analysis of this survey shows that users are not aware of the privacy compromise 
and consequences of it. Moreover, users are not aware where to seek for help if pri- 
vacy gets compromised, and what actions they should take to protect privacy. In 
the sequel of this we wanted to know what are the expectations of users from OSN 
privacy systems. 

These expectations may lead us to provide a novel method to provide privacy- 
aware OSNs, as people prefer privacy over services Q.22. In Q29, “I support the es- 
tablishment of a personal trust manager (where a trusted entity/party keeps my 
preferences/experience to build trust between me and the service provider)” we 
tried to understand that whether trusted third party can be a solution to build trust 
between the user and SP. The analysis is depicted in Figure 5.6. It shows that 83.5% 
participants agree to have trusted third party to store their preferences and build 
trust between them and SPs. 
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Table 5.3: Analysis of users” views on “Privacy vs Services”. 


Question 


Q22. What do you most prefer, privacy or utilities/ 
services. 


Response 


86.5% people prefer privacy over services 
and online utilities. 


Q25. Do you think that service provider/Internet 
companies should ask your consent/permission to 
track what you do on the Internet? 


Majority of people (83.2%) think that 
service providers should ask consent 
before tracking online activities. 


Q28. There should be new laws to protect user 
privacy on the Internet. 


Almost every person (97.6%) thinks that 
there should be a new law to protect user 
privacy. 


Q31. A user should have complete control over which 
sites that collect the user’s important and critical 
information. 


In the view of protecting users’ privacy, 
users should have control over sites that 
collect their information. 


41. Do you feel that the service provider should 
notify you when they deal (access sale share) your 
personal information? 


87.1% people demand for such service 
providers, which will notify users while 
using their personal data. 


44. Have you ever decided not to install an app 
because of the amount of personal information you 
need to provide? 


80.6% people choose not to install app due 
to the risk of personal information sharing. 


@ Agree 
@ Disagree 


Figure 5.6: Users’ response on privacy solutions: “Trusted Third Party.” 


In another question Q32, we wanted to know users’ viewpoint on their identity, 
whether they want to keep their identity hide from OSNs, to protect their privacy. 
Question formed as “Q.32. I will be interested in being anonymous when visiting 
sites on the Internet.” The analysis of users’ responses is depicted in Figure 5.7. 
Among 671 users, 77.9% of them expect to have trusted third party to protect their 


identity while working on OSNs. 


Based on the above analysis of users’ responses on privacy, we can build pri- 
vacy-aware mechanism to protect users’ privacy on social media. The features of 
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@ Agree 
@ Disagree 


Figure 5.7: Users’ response on “protecting their identity.” 


such a mechanism will be as follows: it will have an “algorithm to protect users’ 
identity across OSNs,” and a “trusted data management algorithm to maintain data 
confidentiality.” 
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6 Early prediction of breast cancer from 
mammogram images using classification 
methods: a comparison 


Abstract: Today the deaths of women in the age group 15-54 are increasing due to 
malignant cells in breast. It is recognized as the main cause for deaths of women. 
Day by day, the number of patients are increasing, because its important factors 
have not been identified yet, and it is unable to prevent. Therefore, the possibility 
of improvement is only the early diagnosis. Machine learning (ML) techniques can 
assist the physicians by expanding tools for detection at initial stage and analysis 
of breast cancer, thus increasing the probability of patient’s survival. For routine 
breast screening, currently mammography is the commonly accepted imaging 
method. First, aim of this survey is to develop techniques that are helpful for the 
prior detection of cancer using different classification methods such as support vec- 
tor machine, decision tree, artificial neural network (NN), logistic regression and 
ML-NN, and a comparative study of extracting the feature with and without remov- 
ing pectoral muscle in the initial stage [1] using a different and effectual method is 
the another goal behind this study. 


Keywords: Breast cancer, data analysis, machine learning, classification, prediction 


6.1 Introduction 


Nowadays, women’s death has been increasing because of the breast cancer (BC). 
The abnormal growth of the cell is the main reason of the BC. Generally, identifying 
the cancer specifically in middle-aged women is quite difficult. It cannot be totally 
prevented, because the main reason behind this is not known till yet. To decrease 
the death rate, there is a need to identify BC in the early stage and the better treat- 
ment must be an available option to patients. If BC is identified in the earlier stage, 
number of patients suffering from this disease will be decreased. Mammography en- 
ables to detect cancer in its initial stage. It cannot eliminate the cancer, but can pro- 
tect the life of cancer patients. So, they help to detect intangible tumors and 
increase the durability rate. In biological and medical field, preprocessing is the 
very important concept. 

It is used for diagnosing abnormal cases, image analyzing and extraction of 
useful information. 


https://doi.org/10.1515/9783110628517-007 
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This mammogram image is examined by radiologists (Figure 6.1). It detects the 
abnormalities. It can also classify whether the cancer is in benign or malignant cat- 
egory. The radiologist predicts unsuccessful result at many times to identify the 
false negative (FN) and false positive (FP). Therefore, it is impossible to detect the 
correct abnormality by a human radiologist. From digitized mammogram, automati- 
cally detect the suspicious lesion; for increasing the quality of the image some 
preprocessing steps have been done. Better quality image can be obtained by elimi- 
nating unwanted areas in the background of the mammogram image. Two main 
preprocessing steps are the removal of pectoral muscles and noise. The main goal 
of eliminating the noise from image is to develop noise-free data for further prepro- 
cessing. Pectoral muscle is another important thing, as it interrupts the accuracy 
for identification of bosom malignant growth from the mammogram picture. Hence, 
extraction of pectoral muscles stage performs a significant part in successful identi- 
fication of cancer. 


Figure 6.1: Breast anatomy of women. 


6.1.1 Breast abnormalities features 
Characteristics of circumscribed masses 


Breast mass is a 3D lesion that looks more pronounced from the surrounding breast 
tissue. The mass appears as a dense area of different sizes and characteristics. They 
can be round, oval, lobular or irregular/inferred. This is shown in Figure 6.2. 
Sometimes, the mass is also displayed with microcalcifications (MC). Fluid 
collection forms a tumor that is noncancerous. In the mammography film, it 
looks like a lump. The intensity of the mass tissue is a time similar to that of 
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Figure 6.2: Morphologic spectrum of mammographic masses. 


normal tissue. The morphology of the mass region coincided with that of the 
other normal tissues in the breast. This makes the job of mass detection very 
challenging. The radiologist estimates the probability of cancer using informa- 
tion about the location, size, shape, density and boundary characteristics of the 
mass. Features of benign lesions are well defined and compact, and are approxi- 
mately circular or elliptical border. Malignant lesions are characterized by un- 
clear and uneven boundaries. Malignant masses are sometimes surrounded by 
radial spiny lines. 

The example of the margins associated with circular, lobular and ill-defined 
masses is shown in Figure 6.3. 


(a) (b) 


Figure 6.3: Mass examples with different shapes and borders: (a) circular shape, (b) lobular shape 
and (c) ill-defined shape. 


The example of mammogram with malignant circumscribed mass from MIAS data- 
base is shown in Figure 6.4. 

Undefined boundaries and spiky boundaries have a high probability of malig- 
nancy. Benign processes are usually associated with the presence of a round or 
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(a) (b) 


Figure 6.4: (a) Example of mammogram with circumscribed mass mdb028 and (b) zoomed 
encircled abnormal region. 


oval mass. However, large fluctuations in the mass appearance are an obstacle to 
correct mammographic analysis. 


Characteristics of microcalcifications 


Calcification appears as a small bright spot on a relatively dark background normal 
tissue. These are basically small-sized calcium deposits. Important signs of malig- 
nant breast disease are the existence of calcification cluster. Malignant calcification 
is small and has a variable size and shape. A relatively large number of MCs exist in 
the cluster form. They appear as a prickly oriented branch. Benign calcifications are 
usually small in number, large, scattered, uniform in size and shape, and have a 
smooth, circular margin. They are easily visible on a mammogram. The roughness 
of the shape and the distribution of calcifications are used as important features for 
distinguishing benign and malignant calcifications. Figure 6.5 shows a mammo- 
gram with malignant MC clusters. 

A careful study of the features of calcification will help the radiologist whether 
it is benign, which requires regular examination, and a biopsy is necessary. Size of 
individual calcification is not so important, but its form is determining its classifica- 
tion. Usually the size of the calcification is very small (0.1-1 mm) and is typical that 
the diameter is 0. It is 3 mm. This is a major challenge in detecting calcifications. 
Small calcifications may go undetected due to partial cover by the breast paren- 
chyma. It is very difficult to find small MCs in dense background tissues. If the 
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(a) (b) 


Figure 6.5: (a) Example of mammogram with microcalcification mdb249 and (b) zoomed encircled 
abnormal region. 


background is inhomogeneous, and the calcifications have a low contrast, then the 
calcifications may be mistakenly regarded as noise. 


Characteristics of architectural distortion and spicules 


The third most common mammographic sign of cancer is architecture distortion. It 
strongly hints at malignant tumors. Architectural distortions are defined as a spiked 
deformation emanating from a point and an ordinary architectural deformation 
with focal bending at the edges of the real without the presence of visible masses. 
Figures 6.6 and 6.7 show the breast and malignant architecture distortion in the dis- 
eased area, respectively. 

As one of the visible abnormalities and architectural distortion of the chest 
mass, asymmetry or calcification appear together, which indicates a high probabil- 
ity of malignancy. Injury or soft tissue damage is caused by trauma to the building 
distortion that is a good type. Accurate identification of architectural distortion 
early BC assumes an imperative job in early identification. 


6.1.2 Features used for the detection of abnormalities 


As explained in the previous section, the bounding mass of a mammogram is char- 
acterized by its shape, texture and appearance of the perimeter. MC is characterized 
by roughness of shape and size, homogeneous or heterogeneous tissue, the number 
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(a) (b) 


Figure 6.6: Example of mammogram with architectural distortion mdb249 and (b) zoomed encircled 
abnormal region. 


(a) (b) 


Figure 6.7: (a) Example of mammogram with spicule mdb206 and (b) zoomed encircled abnormal 
region. 


of calcifications per unit area and so on, which is useful for detecting architectural 
distortions and spicule-oriented patterns. All of these functions are grouped into 
major shapes and features such as the texture, the features and orientation of the 
features. 


6 Early prediction of breast cancer from mammogram images — 115 


6.1.3 The analysis of PCA-ICA for detection of abnormalities 
Principal-Component Analysis 


The principal component analysis (PCA) is an established way to deal with statisti- 
cal data analysis, feature removal and data compression. In the case of PCA, the 
goal is to find a small set of less redundant variables to represent the signal in 
much the same way as the original signal representation. In the case of indepen- 
dent component analysis (ICA), the goal is to determine independent components. 
In PCA, redundancy is estimated by connections between data elements. In ICA, de- 
creasing the number of variables is of less importance. PCA uses only secondary 
statistics and is used as a preprocessing step with ICA to reduce dimensions. 

PCA is popular because of its strengths, general applications and its calculations. 
PCA converts the initial dataset in the form of a vector into a new vector sample set 
that allows you to select the desired dimensions. In high-dimensional data, it is very 
difficult to identify patterns. PCA can be used as a powerful tool for analyzing data as 
it reduces its dimensions. Figure 6.8(a) indicates a plot of the two-dimensional zero- 
mean data. Figure 6.8(b) indicates a plot of the data plotted with the eigenvectors 
above it. 
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Figure 6.8: (a) Plot of mean subtracted data. 
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Figure 6.8: (b) mean subtracted data and eigenvectors on top. 


They appear as oblique dashed lines and are perpendicular to each other, and 
provide important information about the patterns in your data. First, data is con- 
centrated near the first eigenvector; second, eigenvector indicates a nonsignificant 
pattern in the data. 

In general, images appear in large sizes. Whenever we take a picture of any 
type, processing, feature extraction or classification, we need to take more num- 
bers; finally, the total size of the data matrix is significantly increased. Thus, if the 
size is huge, then the complexity of the calculations, time needed and the memory 
requirements automatically increase significantly. Hence, there is a need of dimen- 
sion reduction. In an image, you can discard those redundant or less distributed 
features that have redundant functionality and provide less important information 
about the image. 

PCA comes to our rescue in this situation. Suppose you have 50 images as input 
data. Each image is transformed into a single dimensional vector. Now all 50 images 
are placed as rows of a matrix and a data matrix is generated. As you can already 
see, the covariance of the image is calculated, and the eigenvectors and eigenvalues 
are given. The covariance matrix is a symmetric matrix with off-diagonal elements. 

The diagonal element of the covariance matrix is actually the variance of its own 
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dimension. By discarding the redundant elements directly, we can obtain a new 
image set of reduced size with only the principal components that give the most im- 
portant information from the image. Figure 6.9 shows the principal components with 
corresponding variance. 


variances 


Percentage of variances 
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1 2 3 4 5 6 7 8 9 10 


Principal components 


Figure 6.9: Plot of principal components with corresponding variances. 


Independent component analysis 


When the image is transformed from the original space region to another region, 
explore some of the key features of image data that are useful for image analysis. 
One of the simplest techniques is the main component, which is described earlier. 
Efficient methods for characterizing natural images are higher order statistics, but 
these are overlooked by the principal component. The use of independent compo- 
nents can overcome this limitation of the PCA. Each image can be represented as a 
linear combination of unnecessary independent components. Direct calculation of 
independent components is possible by determining the joint distribution that is 
not feasible. The optimization of some independence-related criteria is used to de- 
velop algorithm to determine ICA. 

A statistical “latent variables” model can be used to define ICA. Vector X is 
formed by n random variables x, xə,...., Xn. Vector X can be represented by linear 
combinations of n random variables sı, sə,..., Sn, which are statistically mutually 
independent, denoted by a random vector s, and then ICA is defined as 


Xj = Pi S + PigSp+ +++ + Pi SA foralli =1,...,n 


where the “pi?” are some real coefficients. In vector-matrix form X can be repre- 
sented as 


X = PS 
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Sometimes the columns of matrix P are needed; denoting the columns of matrix P 
by p; the mixing model can also be given by 


X= yır 
i=1 


ICA is based on the assumption that if components S; are unnecessary independent, 
and independent components must have unknown non-Gaussian distributions. 
Then, after calculating the matrix P, its inverse W is computed, and the indepen- 
dent components are obtained by 


S= WX 


6.2 Review of literature 


This section discusses the literature review in detail about the women BC prognosis 
prediction. 

In biotechnology and medical field, image processing is an important task. 
Extracting important features of the images they used a texture-based method. 
First, Farzam et al. applied discrete wavelet transform on the image and approxima- 
tion matrix is changed into 1D, utilizing zigzag scanning and finally volatile signal 
features are removed. These features are more delicate to light and edge so that 
they can be different from the abnormal and normal individuals. Experimental re- 
sult shows that the accuracy is better than the previous system. Limitations: it re- 
quires large number of cases [1]. 

Clustering classification of breast MC into malignant and benign category is a 
challenging task for the computerized algorithm. Alan et al. [2] used multiview clas- 
sification for the classification of MC, and it is implemented using logistic regres- 
sion classification. This experiment is conducted on the digital database for 
screening mammography and this dataset includes demographic data of the pa- 
tients. Poor accuracy is its limitation: 


1 
SE exp( — (80 + B1x)) 


where P(x) is interpreted as the probability of the dependent variable, X is the design 
matrix and £ the shared parameter. 

Computerized clustered MCs in mammograms suffer from the existence of FP re- 
sults. Maria et al. explored the statistical estimate to determine some amount of FP 
that exists in the identified MC. First, they found out some amount of true positives 
(TP) by using Poisson-binomial probability distribution of training they used logistic 
regression models. Three different methods are used for MC detectors, namely con- 
text-sensitive classification model detector, support vector machine (SVM) detector 


P(x) 
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and DoG detector. Limitations: without any MC it includes the number of normal 
cases. The huge part in a mammogram image does not have a few MCs [3]. 

Ting et al. used self-regulated multilayer perceptron (MLP) neural network (NN) 
for the classification of BC. Machine learning (ML)-NN utilizes MLP to support medi- 
cal specialists in diagnosis. For categorizing the images into normal patients, be- 
nign and malignant trained ML-NN is used. Oriented ridge-like function can be 
expressed by only single perceptron and MLP-NN in layer-by-layer basis. But it re- 
quires high computation cost [4]. 

Dongdong Sun et al. [5] proposed prognosis prediction of BC techniques such 
as multimodal deep NN by combining multidimensional. In this they integrate the 
multidimensional data, which include copy number alternation profile, clinical 
data and gene expression profile. They used multidimensional data, and perfor- 
mance of multidimensional techniques is compared with the single dimensional 
data. The proposed system gives more appropriate result than the current system 
and it can be identified by experimental results. This method established on single 
source of information that has some restrictions such as an absence of noisy data, 
nonuniversality and singularity. 

In the CAD (computer-aided detection) techniques, preprocessing of images is 
divided into two main steps such as removal of pectoral muscles and noise. 
Sreedevi et al. [6] combined ROR (robust outlyingness ratio) mechanism with the 
elongated nonlocal means filters that depend on the discrete cosine transform for 
removal and discovery of noise. For identified pictorial muscles they used a global 
thresholding, recognized the edge of full breast and used edge detection processes. 
The limitation for this strategy on a reserved database for processing, application of 
a straight line-based strategy is used. 

Glioblastoma multiforme (GBM) is an aggressive type of brain cancer with the low- 
est median survival rate of patients. Chen Peng et al. [7] proposed mRMR feature selec- 
tion method with multiple kernel learning classification method for the prediction of 
GBM prognosis. The survival rate of patients is different for every subtype of glioma. 
For this experiment they used the cancer genome atlas dataset of various types of can- 
cers. They improves the prognosis prediction accuracy of GBM and compared the per- 
formance with the one kernel method using same dataset. Because of the different 
datasets and process, method cannot compare with other researches directly: 


n 
k= 3 Biki 
i=1 


where ğ is the vector of coefficients for each kernel, K the kernels and N the num- 
ber of kernels. 

In this advanced technology, new possibilities are coming from a scientist to 
gather multimodal data in the different applications such as medical imaging, 
brain/body machine interface, bioimaging and omics. Fabian et al. [8] provide a 
deep study on utility with dissimilar biological data and relative study of the deep 
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learning techniques, reinforcement learning and the combination of deep learning 
and reinforcement learning in mining of biological data. Heavy computing memory 
and power desired by this method are the main limitations. 

Khan et al. [9] proposed techniques designed for irregular classification of 
breast mass from the digitized mammography images. They considered for texture 
feature as a local binary pattern (LBP) and this feature is categorized by the ML 
techniques such as SVM. Mammography is a technique used to take multiple views 
and angles of the breast. They classified “mediolateral-oblique” views and “cranial- 
caudal” views separately and finally combine the classification results for accurate 
diagnosis. This technique reduces the classification error and it reaches the high 
reorganization rate. It contains extra local spatial information. Effectiveness of sys- 
tem is not good: 


by max(0, 1—y;(w.x;- b)) | + Aw* 
i=1 


where yı is the itch target (i.e., in this case, 1 or -1), (w.x;- b) is the current output 
and A is the tradeoff between increasing the margin size. 

Farag Alhsnony et al. [10] proposed a new automated technique and detected 
the region of pectoral muscle by utilizing a bit depth and edge processes system for 
segmenting a digital mammogram image. For more accuracy, CAD system is re- 
quired. To determine the BC, it was found that the third-order fitting curve can be 
used. Limitation is recognition of pectoral muscle region in mammogram image 
needs a series of mathematical analysis method to be recognized. 

Qiao Pan et al. [11] proposed a novel NN that depends just on character-level re- 
presentation for disease classification. Their model gives information through the 
CNN (convolutional neural network) and remaining network over characters. Output 
of this is given to a GridLSTM (grid 1ong-short-term memory). GridLSTM model is 
used to capture both forward and backward long-term dependencies between charac- 
ters. For character-based grid CNN, they need to extract thick feature vectors. 

BC is a very dangerous disease in the United States and the United Kingdom. It 
is also one of the leading diseases with the highest mortality rate. This BC is an 
irregular growth of cells from the blood tissue and tumors can be malignant or be- 
nign. Early recognition builds the odds of survival and decreases the mortality rate. 
The method of classifying the mammogram based on the characteristics extracted 
using LBP and the LGP (local gradation pattern) with the result, and histograms are 
compared. LBP and LGP techniques are commonly used for finding pattern in tex- 
tural analysis. The generated pattern is used to classify tumors using an SVM to 
classify BC [12]. 

BC is one of the important reasons for death among women. Many techniques 
have been developed to detect and diagnose the disease, but have not improved the 
results among the number of deaths caused by this disease. Therefore, early detection 
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and diagnosis is the only way to prevent them from death. Previously, radiologists 
used to manually check the signs of cancer with mammographic images, but they did 
not give an effective result. Therefore, in this chapter, a new technique has been im- 
plemented for detecting and diagnosing the BC, and for the classification of cancer, 
image processing techniques such as texture method and KNN method were used, 
and it was possible to obtain the result where the reliability was high [13]. 

The underlying motivation of this study to a number of various mechanisms, spe- 
cifically the remodeling of collagen fibers in tumor-related stroma, is that the rede- 
signing of collagen fibers, hematoxylin and eosin has been accounted for to be 
identified with the survival of patients in the tumor microenvironment. The purpose 
of this chapter is to classify interstitial regions with maturity level and show that this 
classification coincides with the classification of skilled observers, and the method in 
which we combined a random decision tree classifier for the categorization of BC in- 
tertissue regions, the basic image features of multiscale and the LBPs [14]. 

Detection of breast muscle is an important invention in improvement in diag- 
nostic detection of BC. The author proposes an intensity-based technique for the 
pectoral muscle boundary detection in the mammogram images. A 3 x 2 enhance- 
ment filter mask has been proposed and it is applicable for the image of thoracic 
region of the mammogram. Thorax boundary point was detected by the threshold 
method. Finally, the boundary of the pectoral muscle was obtained by connecting 
all the detected boundary points. The 322 mammography of the 320 digital mam- 
mography (MIAs) database was examined. The mean FP rate and the FN rate 
showed the accuracy of the proposed method [15]. 

Recognition image processing technology related to medical image is ex- 
plained. There are a few assortments of proliferative malignancy that are now fa- 
mous by researchers who have hit an aggregate to 100. Every single malignant 
growth is unique in its kind to be acclaimed along with the signs. This chapter has 
some expertise in more than a few image processing algorithms that are included in 
the diagnosis of breast melanoma, which is a risky cancer inspired in women world- 
wide. On measurements for this addition, learning is taken from the international 
body of cancer research — the WHO (World Health Organization) and the American 
Cancer Society. Benchmarking of current and previous studies has been shown to 
enhance long-term findings [16]. 

Breast malignant growth is the most widely recognized disease of ladies every- 
where throughout the world. The most commonly used screening technique is 
mammography. To decrease the expense and remaining task at hand of radiolog- 
ists, we used a computer-assisted approach to classify and localize calcifications 
and masses in mammogram images. Author improves the conventional approach 
and applies a deep CNN for automatic feature learning and classifier construction. 
In computer-aided mammography, the deep CNN classifier loses the details of an 
image from resizing at the input layer, so instead of directly resizing to the full 
mammogram image, the trained classifier labeled the image patches, and the full 
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mammogram image of the work adapted to it does not have a significant anomaly. 
The most advanced deep CNNs are analyzed on the performance of classifying the 
anomalies. From the experimental results, Vgnet was 92.3% in classification. It was 
shown that it received the highest overall accuracy at 53%. To localize the anomaly, 
ResNet is selected to calculate the class activation map [17]. 

In their lives, among 8% of women diagnosed with BC, and after lung cancer, 
BC is the second most basic reason for death in both developed and underdevel- 
oped countries. BC is characterized by gene mutations, consistent torment, change 
in size, color (redness), texture of the skin of the breast. BC classification indicates 
to the fact that pathologists locate a deliberate and target prognosis, and generally 
the most regular classification is binary (benign/malignant) cancer. Currently, ML 
technology is widely used in BC classification problems. They provide high labeling 
exactness and efficient diagnostic functions. Two dissimilar classifiers for the clas- 
sification of BC are naive Bayes classifiers and near-knee stop classifiers. They pro- 
pose the examination of two new classifiers and assess their precision utilizing 
cross-validation [18]. 

Faye et al. [19] examined the normal and abnormal tissues in mammography 
using the deep learning method. VGG-16CNN deep learning architecture with a con- 
volution filter of (3 x 3) from the Irma dataset is implemented on the mammogram 
ROI. The deep feature matrix is the first completely linked layer. The results have 
been calculated using a cross-validation of binary tree, SVM, simple logistical and 
10 times on KNN (k = 1, 3) classifiers. In this method, AUC1, the categorization accu- 
racy of 100% was obtained at 0. 

In [20], CAD system, extraction of the breast region which removed the pectoral 
muscle and delineation of the breast contour are indispensable pretreatment pro- 
cesses. Predominantly, it allows the study for anomalies limited to the area of the 
breast without an excessive effect from the background of the mammogram. A new 
method for identification and removal of pectoral muscles in the mediolateral obli- 
que (MLO) field of mammogram using the iterative threshold method is presented. 
The algorithm also identifies the presence of abnormal axillary lymph nodes, which 
are the main signs of BC, and detects the boundaries of the breast. 

Over the past few years, a few ML methods have been proposed to structure an 
accurate categorization system for some medical problems. In this chapter, the au- 
thors relate and analyze the classification of bosom malignant growth with various 
Al calculations utilizing k-fold cross-validation (K-CV) technology. The decision tree 
is a simple Bayesian classify classifier using SVM algorithm three dissimilar kernel 
features using NN original and predictive Wisconsin BC. A relative investigation of 
the study focuses on the effects of k in k-fold cross-validation and achieves higher 
accurateness. The author uses the benchmark dataset from the UCI in experimental 
theory. It is common to choose k = 10 for KCV. But this is due to the increase in 
computational costs. It is necessary to train more models. Overall results showed 
significant conclusions. k-Value of k is in fold cross-validation [21]. 
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The most general cause of BC deaths in women and the reasons for its cause 
are not yet fully known; however, quick detection of BC can be decreased with 
associated morbidity and death rate. Accurate removal of pectoral muscle is based 
on accurate detection to pectoral muscle boundaries. This suppression in gray- 
scale mammogram images can increase the accuracy of the results of CAD techni- 
ques used in previous detection of BC. This chapter proposes a new approach 
based on similarity between strength to delineate pectoral muscle boundaries, 
using a measure of semantic similarity between words in natural language pro- 
cesses and features of information retrieval Fi. To achieve good results, use mor- 
phological operations to remove unnecessary element mammograms from such 
radiation-impermeable artifacts [22]. 

Digital breast tomosynthesis gives huge chances in both cancer diagnosis and 
detection. It provides a high-quality picture and beats some inherent limitations of 
traditional 2D digital mammography due to the coinciding tissues that make cancer 
detection difficult. Unluckily, the quality of the tomographic images is straightly 
correlated to the radiation dose of the patient and there is significant pain due to 
the parameters established by the specialist throughout the mammographic exami- 
nation. Typically, the tomosynthesis breast provides a small increase in the dose of 
radiation with respect to the mammography 2D. The aim of the study was to com- 
pare the performance of digital mammography and tomosynthesis, and to investi- 
gate the relationship between the dose of radiation to the patient and the quality of 
the image obtained [23]. 

Clustered MCs is the earliest symbols of BC. Moghaddam et al. [24] planned a 
new CAD system for the automatic detection of two-step MC. First, the pixel corre- 
sponding to the possibility of fine mineralization is found for multilayer feed for- 
ward control using NNs employing the input of the network of four wavelets, which 
are characterized by two gray levels. The output of the network is transformed into 
a probable MC object using a four-point spatial connection. Next, they remove 25 
features from potential MC objects and use a variety of Adaboost SVM (DA-SVM) 
and three other classifiers to identify individual Mc. Free response operating char- 
acteristic curve was issued to calculate CAD system performance and one per image 
by utilizing the DA-SVM.90 at a cost of 043fp. The average TP detection rate of 44% 
was achieved, and the very good detection performance of the CAD system was 
shown. 

A CAD system can be provided as a second view for radiologists. This chap- 
ter describes the outline of recent development in CAD technique. Anomaly de- 
tection, anomaly classification and content-based image retrieval are outlined. 
On the abnormality detection, the following were introduced: microcalcium de- 
tection, mass detection and multiview base detection. On the abnormal classifi- 
cation, the microcalcium classification and the mass classification are shown 
(Table 6.1) [25]. 
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Table 6.1: Comparative analysis. 


(a) comparative study for image preprocessing. 


S. Feature Methods Advantages Disadvantages 
No. extraction 
1. Texture Gray-level co- It describes the texture of image It takes additional 
occurrence matrix by calculating precise pixel values time. 
(GLCM) [26] and then removing statistical 
measures from this matrix. 
Localbinary Lower intensity pixels can be split Not more accurate 
pattern (LBP) [11] more accurately than LGP. than LGP. 
Local gradient LGP has better accuracy. LGP has It cannot split the 
pattern (LGP) [11] smaller detection fault in lower intensity pixels. 
comparison to LBP and better 
computational simplicity. 
Chebyshev Used for distinct and orthogonal Random variable 
moment moment values. differs from its mean 
by more than k 
standard deviation. 
LAWS measures of LAWS technique uses a 5 x 5 mask 
texture [12, 27] of convolution matrix to calculate 
the texture energy. Four main 
characteristics are level, edge, 
spot and ripple. It takes less time. 
2. Shape Compactness For circle, compactness value is For translation, 


zero and this value grows with 
roughness of elongation of the 
main object. 


rotation, starting point 
and the size of the 
contour compactness 
measure is invariant. 


Spiculation index 


Measure of the degree of thinness 
of spicules, and has supportable 
consumption level. 


A good performance 
would occur when 
there is a very high 
level of instability. 


Fourier factor/ 
Fourier transform 


İt is not difficult to appliance and 
is based on a well-built theory of 
Fourier analysis 


Fourier transform does 
not supply limited 
shape information. 
After the Fourier 
transform, local shape 
information is spread 
to all coefficients and 
not limited in the 
frequency area. 
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(b) comparative study for classifiers. 


S. Classifiers 
no 


1 SVM [1] 


Advantages 


It has a regularization parameter, which makes 
the user think about avoiding overfitting, 
Utilize a structural risk minimization to 
diminish error of learning machine. 


Disadvantages 


Long training time for large 
datasets. 


2 Multiview [2] 


Other characteristics in both views and density 
types are performed by curvelet rotation- 
invariant feature. 


Time consuming. 


3 CADx [3, 28] 


Information provided by model helps reader to 
increase the accuracy for detection. 


Existence of high levels of 
FPs affects the accuracy of 
CADx classifier. 


4 ML-NN [4] ML-NN can categorize the input data into three lt is difficult to show the 
classes such as normal patients, benign and problem to the network. 
malignant. 

5 DNN [8] DNN always uses multiple features and to Needs large dataset, typical 
display the outcome of model, it uses hidden feed forward network where 
layers. the input flows from the 

input layer to the output 
layer through number of 
hidden layers, which are 
multiple layers. 

6 KNN For parallel implementation it is easy to work Requires more space for 
with local info. storage. It sometimes slows 

in categorizing tuples. 

7 CNN [17] Mainly used for accuracy in image recognition. High computational cost. 


CNNs are very good feature extractors. 


6.3 Methodology 


6.3.1 Multilayer perceptron 


Preprocessing stage 


The mammogram images can be preprocessed to improve its quality and highlight 
the agency of images. Input mammograms shall conform to the appropriate resolu- 
tion for training. The digital mammograms of normal patients and patients with BC 
are included in the training data. Medical imaging may contain undesirable noise; 
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therefore, medical imaging is tortured to improve image quality. The improved im- 
ages are then tagged and entered as training datasets to enter ML-NN for the pur- 
pose of training(Figure 6.10). 


İnput images {>| Preprocess m| Trainning set 


Multilayer Classification: 
neural Testing Bening, 
network Sets Malignant, 
setup Normal 


Figure 6.10: Multilayer Perceptron Neural Network for Classification of breast cancer. 


Multilayer perceptron 


The main objective of the this chapter is the operation of multilayer perceptron 
(MLP) to classify BC. The MLP consists of neurons called perceptron. In regard to 
the weights of neurons in the input nodes, the generation of the output by the em- 
ployment of the mathematical function of activation is not linear, and the linear 
combination is generated by the perceptron by computing a neuron of output from 
multiple inputs that are valued real. The input node signal spreads through the 
MLP NN layer by layer. 

Generally, MLP is adopted to solve problems involving supervised learning. It 
is indicated that a training dataset with input-output combination pairs and tags 
are used for input. Therefore, the MLP should be determined on the basis of training 
equipment. 

The MLP is created with many properties like bac propagation. The flow of MLP 
with backpropagation is shown in Figure 6.11. 

It can be used in combination of two or more phases in Figure 6.12. The black 
node represents the initial input. The main two stages participate in the training of 
this network. During the first phase, the input nodes are generated forward and the 
outputs of each output node are calculated. Then from expected output value each 
output node is subtracted. Therefore, in phase 2, all generated output node errors 
are passed to the opposite side, and the error weight is stable. These two phases are 
looped until an acceptable value is reached. 

The authors propose to introduce a new technique for early prediction and com- 
parative study of extracting the feature with and without eliminating pectoral mus- 
cle in the preprocessing phase. 
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{Input layer} {Hidden layer} {Output layer} 


Figure 6.11: MLP with back propagation. 


In the proposed system, results will be compared with the other techniques of 
classification. The comparison will show the accuracy and performance of system 
for prediction. As a result, proposed architecture should be able to predict cancer at 
early stage. 


6.3.2 Algorithm 


Input: I = Mammogram image from MIAS database 

Output: P = Detection of abnormalities 

Begin 

Read MIAS image I from the MIAS database. 

Calculate number of rows and columns in the MIAS image 

Apply GLCM algorithm. It describes the texture of image by calculating precise pixel 
values and then removing statistical measures from this matrix. 

After that we perform LBP algorithm. 

Detect the edges using Fourier Factor/ Fourier Transform. 

Detect the Growing part in the image 

Find out the shape of growing part calculates the area of Growing part. 

Detect the type of abnormalities 

End. 


6.3.3 Dataset used 


Two databases are used to carry out the proposed research work: a digitized data- 
base of the mammographic image analysis society (MIAS) and a full-field digital 
nonpublic. 


128 — Snehal Mane and Vandana Jagtap 


Mammography DB 


v 
Texture based 
1. Local Binary Pattern(LBP) 1 77 
2. Local Gradient Pattern(LGP) S de 
2. Spiculation Index 
3. GLCM 3. FourierT f 
4. LAWS measures of texture ıı. 
Segmentation Feature extraction 
Classifiers 
SVM Decision tree ANN | Naive MLP 
Bayes 


| 


K-fold cross validation 


| 


Figure 6.12: System architecture. 


MIAS database 
Two databases are used to carry out the proposed research work. One of it is a digi- 


tized database of the Mammographic Image Analysis Society (MIAS) and the other 
is Full field digital non public. 


MIAS dataset 


Mammograms from this dataset are caught in the MLO view and scanned at a reso- 
lution of 0.05 mm pixel size with a thickness determination of 8 bits. The size of 
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each image is 1,024 pixels. There are a total of 322 digitized images from the UK 
Breast Screening Program. The 322 images contain data of 161 patients in the MIAS 
dataset [27]. Therefore, the MIAS dataset consists of 322 mammogram images that 
are divided between 208 normal patients, 66 benign and 48 malignant. These im- 
ages are carefully diagnosed to identify the type and position of the abnormality. 
For every image in the MIAS dataset, type of background tissue, type of irregularity, 
center and radius of irregularity are supplied [29]. 

This database from the normal image with a sample anomaly is shown in 
Figures 6.13-6.16. For a normal breast, there are three types of breast arrange- 
ments: Fatty, fatty glandular and dense glandular (Figure 6.13). The mammogram 
is always captured for the breasts of both the left and right. Therefore, it is a pair 
of all types of mammograms. The oncologist first looks for the asymmetry of the 
left and right breast, and if there is asymmetry, then it is analyzed further. Figure 
6.14 shows examples of benign patients and malignant patients circumscribed 
and other masses. 

Figure 6.15 shows examples of benign and malignant patients’ architectural dis- 
tortion spiculations. Benign and malignant MCs are shown in Figure 6.16. In all these 
images, there is an anomaly in either the left or the right breast. Abnormalities can 
easily be seen on a fat background, whereas if the breast composition is dense, the 
abnormality is not visible. This can be clarified from the mammogram mdb032 from 
Figure 6.14(b) and mdb239.3.22 from Figure 6.16. In mdb032, other clusters exist, and 
in mdb239, there are MC clusters that are not clearly visible due to the dense breast 
background. 

Some preprocessing steps have been completed successfully on MIAS dataset. 
Figure 6.17 contains original dataset images. On that data our novel approach, that 
is, LBP method, helps convert it to binary format that is 0 (black) or 1 (white). It is 
shown in Figure 6.18. Second method is applied, that is, Laplacian filter/Laplace 
transform in Figure 6.19, which is used to find areas of rapid changes in edge of 
images. Next GLCM (gray-level co-occurrence matrix) method is used [30]. It shows 
features like entropy, correlation, variance and angular moment. Hence, both LBP 
and GLCM methods are finding texture features of images. 


6.4 Conclusion 


This chapter discussed about the early diagnosis of BC and the preprocessing of 
image and its importance. The main aim is to develop techniques that are helpful 
for early detection and a comparative study of extracting the feature with and with- 
out eliminating the pectoral muscle in preprocessing phase using a new method. 
The main contribution is to perform strong preprocessing and powerful feature ex- 
traction and selection before classification. Some abnormalities were found, such 
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mdb003 mdb004 


da 


mdb007 mdb008 


4“ 


mdb173 mdb174 


Figure 6.13: Sample normal images from MIAS dataset [27]: (a) fatty dense; (b) fatty glandular; and 
(c) fatty.. 
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mdb015 (Benign) mdb015 


mdb027 mdb028 (Malignant) 


mdb031 mdb032 (Benign) 


mdb271 (Malignant) mdb272 


Figure 6.14: Circumscribed (a) and miscellaneous masses (b) from MIAS database. 
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(a) mdb 155 (Malignant) mdb 156 


(b) mdb195 (Benign) mdb196 


Figure 6.15: Architectural distortion (a) and spiculations (b) from MIAS database. 


mdb239 (Malignant) mdb240 


Figure 6.16: Microcalcifications from MIAS database. 


as identification of masses like circumscribed and ill defined, identification of MCs 
and identification of spiculated lesions and architectural distortions. In that 
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mdb003 mdb004 


3 


mdb003 mdb004 


Figure 6.17: Original data. 


Figure 6.18: Performing LBP. 


clusters of MC is useful for early detection. For detection of abnormalities, statistical 
data analysis and feature extraction, ICA is used. 

From comparison it was found that for texture feature, LAWS measures of tex- 
ture, and for shape, compactness methods are best. MLP with recurrent NN pro- 
vides more accuracy when compared with other classifiers. The proposed model is 
expected to predict the cancer at early stage, whether it is benign, malignant or 
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mdb003 mdb004 


Figure 6.19: Laplace transform. 


normal. Results can be improved without the removal of pectoral muscle from 
mammograms that minimize the computation. 
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Akshada Rathod and Sambhaji Sarode 
7 Deep brain monitoring using implantable 
sensor and microcontroller: a revievv 


Abstract: The consequent evolution in technologies is reaching tovvard develop- 
ment in today’s world. Microelectromechanical system (MEMS) technology is one of 
the emerging paradigms that signify continuous affection in healthcare systems. In 
hospitals, it is very necessary to constantly examine the health condition, monitor 
movements and physiological parameters of a patient. Collection of data, long-term 
connectivity of sensors with the network, data privacy maintenance, treatment over 
a number of neurological disorders and storage of diagnostic results is a very criti- 
cal task in such organizations. Every bit of data is required to store in some specific 
format, and loss of data will generate the false result. To overcome such problem, 
different types of biomedical sensors and instruments are developed using MEMS 
technology. In this chapter, the deep brain monitoring using implantable sensors 
and microcontroller is used for treating number of neurological disorders, such as 
dystonia, tremor, Tourette syndrome, Parkinson’s disease, cluster headaches and 
major depression. The technique includes electrodes embedded inside specific re- 
gions of brain and monitoring activity of patients remotely. 


Keywords: Pulse generator (PG), Internet of everything (IoE), real-time brain moni- 
toring, biomedical sensor, microcontroller, stimulation parameters 


7.1 Introduction 


Today’s healthcare system is dominated with IoE (Internet of everything), which 
uses ambient intelligence (AmI) system. Aml is a collection of several smart devices 
that are active in the environment. They are well designed and developed in such 
a way that it automatically sync, control and manage connectivity with other sensor 
devices. Various applications depend on the sensors like a wireless body sensor net- 
work (BSN), biometric sensors, a wearable sensor, motion detection sensor and im- 
plantable sensors, these are developed using AmI and Internet of things (IoT). 
Advancement of a micro-electro-mechanical system (MEMS) technology leads to 
growth in these devices in recent years. 

eHealth technologies give prominent features for minimizing healthcare ex- 
penses and enhance patient care in large scale. For measuring different parame- 
ters like pressure, temperature, and sugar level of humans, a “smart implant” 
technology is manufactured by the medical researcher, and also wearable sensors 
like smart watch, which is used to detect blood pressure (BP), heartbeat count 
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and posture aid. Biosensors could detect the internal state of the human body 
using electromagnetic radiation. Cancer cell within the body has been identified 
using nanotechnology. Because of enhancement in such sectors using MEMS 
technology [1], patients are not needed to visit the hospital on an everyday basis 
and it made really easy for caretakers to keep track of every activity of patients 
remotely. 

Embedded devices are used to transmit and receive the signal to the devices 
present in the vicinity. Emerging evolution is occurring with the development of an 
IoE [2]. IoE has the ability to sense and collect data from around the world and 
share data across the network, where it is being processed and utilized sequentially. 
IoE is the collection of various devices, which are based on standard communica- 
tion protocols. This technology extensively used to communicate about their inter- 
nal and external environment between several device components. Communication 
between the devices is managed via secure networking and standard wired or wire- 
less communication protocols. Embedded devices are capable to collect heteroge- 
neous data from the proximity and can be processed, monitored and controlled 
remotely; these devices are components of IoE. Analysis of collected data locally is 
done using edge or mobile devices. IoE-based microcontrollers, microprocessors 
and sensors are integrated collectively to accomplish an appropriate task to mini- 
mize the human interaction with computers [2, 3]. 

In the United States, Medtronic is the world’s largest medical technology orga- 
nization. They have an advanced product named deep brain stimulator (DBS) de- 
vice, which safely and efficiently manages tremor, rigidity and bradykinesia related 
to Parkinson’s disease (PD). The drawback of this product is its high cost. At pres- 
ent, in India 35-45% of the population suffering is from PD, out of which 28-35% 
population cannot afford such high-value products [4]. An expected 30% of individ- 
uals with PD are analyzed before the age of 50. 

In India, current research on DBS is carried out to provide proper medical care 
for PD patients 15-71. DBS technique is a neurosurgical procedure in which electro- 
des are inserted inside specific region of the brain that connects to the device 
through an extension cable. This device helps in delivering electrical stimulation to 
those specific regions. Same as cardiac pacemaker shown in Figure 7.1, the tech- 
nique uses a biomedical device called a pulse generator (PG) [8] to control the flow 
of electrical pulses inside the brain, thereby preventing the production of irregular 
nerve signal that causes PD. The general system for deep brain monitoring consists 
of an electrode implanted into the brain of the patient, which is connected to the 
implanted device located in the chest area or the abdomen through extension lead 
wire. The electrode and implanted device form a closed circuit. The device commu- 
nicates with the external software application. The whole system runs on recharge- 
able battery that resides inside the implantable device and is periodically charged 
wirelessly from outside the body. 
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Figure 7.1: Cardiac pacemaker. 


7.2 Related vvork 


A brief glimpse of this study gives the overall idea of vrhat exactly the e-health care 
system vvorks to track and monitor the activities of patients remotely. The related 
work gives an overview of medical sensor-based different application such as various 
real-time e-healthcare application, remote monitoring of the patients, doctor-patient 
relationship management, “cloud network to store data related to the patient 1221.” 
IoT cloud infrastructure and stimulation of pulse parameter using sensors. Finally, 
the summary of the survey has been carried out by reviewing related studies. 

Behari et al. [4] focused on philosophical data on PD by investigating two risk 
components, as there is no data on transmission and control of Parkinson’s avail- 
able in India. For the investigation, they studied few Parkinson’s patients and the 
same number of healthy people of the approximately same age. As PD is a rare dis- 
ease and only occur at age above 60 years, it makes the study of risk components 
little difficult. Data for this chapter was collected by face-to-face interview with the 
patients. Information was classified based on the structure of the human popula- 
tion, various environmental components, history of depression and PD in the family 
and occupation. Authors set some rules to collect more accurate data. While study- 
ing, authors considered various use cases, which include case-matched control and 
age-matched control. Data were categorized with the help of different combinations 
of use cases. They also calculated McNemar chi-square value, which is a contin- 
gency table for paired data. Authors also calculated the p-value (potential risk com- 
ponent value). Their results showed that the probability of growing PD is more if 
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a person has PD in his family, if that person has a history of depression and is 
a male, and if he drinks well water, but spending time with pets and alcohol intake 
can reduce the chances of PD. They also found that a vegetarian diet, living in 
a population-less environment has no relation between these components and PD. 
According to the authors, these environmental components are also critical as ge- 
netic components. 

Albayrak et al. [9] implemented the system based on an electronic survey for 
health care. This system is designed for early discovery of diseases like an epi- 
demic disorder, which can be remotely monitored. The system dynamically acti- 
vates to perceive the health status of patients. Doctors and health specialists can 
actively control and monitor the status of individuals by collecting the survey from 
individuals through electronic devices and create geographical risk maps. The pro- 
posed system has been tested in two sections: one is professional and another is 
an individual. In a professional method, the medical status evaluation has been 
carried out by clinicians as they distribute blueprint of reports to each patient 
through a software application. In an individual method, patients fill those reports 
and provide all the information about their health condition. Clinicians can easily 
evaluate the medical status of patients as per the response given by patients in the 
form of a report. Web-based application for monitoring of patients with PD was 
proposed by Chen et al. [10], wherein system provides an integration platform for 
services to execute at three different layers. Wearable sensors attached on patients’ 
body gather accelerometer data. The web-based user interface permits two-route 
communication among patient and clinician hosts. Clinicians can get to the sensor 
and patient information and communicate to patients using the video conferenc- 
ing. Authors evaluated latencies and bandwidth prerequisites at various levels of 
the framework. To guarantee estimation precision, all hosts synchronized to 
a similar network. 

Chen et al. [11] studied and implemented a real-time remote monitoring system 
for PD patients with DBS. The system comprises four modules: a patient client, 
a physician client, video communication and a server station. This system provides 
web service on the Internet, the server station sets up a virtual connection between 
the patient and physician client. The physician client helped nurses to observe ade- 
quate data about the patients and giving alteration guidelines to the patient client 
through the wireless communication channel. After instruction execution, the pa- 
tient client uploads the history records and results to the server station. Li et al. [12] 
proposed a pervasive healthcare monitoring system that can transmit patients’ vital 
signs continuously to remote medicinal applications. For implementation authors 
focused on two modules: first the data acquisition module and second the data 
transmission module. The first module is responsible to collect data from biomedi- 
cal sensors and forward it to the connector in short distance. In the second module, 
remote services receive sampled data from sensors and results are displayed to car- 
diologists in real time. 
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Monti et al. [5] investigated difficulties occurring in medical implantable devi- 
ces operated at low-frequency range, which uses same wireless communication link 
for transmission of data and power. Authors examined wireless energy connection 
interface working in the MedRadio band. From the detailed analysis, authors illus- 
trated the energy transfer efficiency of about 10.62%. Cubo et al. [6] present DBS 
therapy for PD, developed in order to reduce the seriousness of diseases by adjust- 
ing stimuli parameters. The authors described the methodology by simulation and 
clinical information acquired through medical imaging, electrical estimations and 
target side effect measurement. This system is developed using open- and closed- 
loop methodology. Stimulus parameters are manually set by doctors in open loop, 
whereas closed loop illustrates strategies used for evaluating motor symptoms and 
electrical estimations. 

Smart DBS (SDBS) is implemented by Khan et al. [7] for evaluating the perfor- 
mance of stimulator. The essential functions of the SDBS incorporate movement re- 
cording, data interpretation, signal processing, stimulus waveform creation and 
optimization. Gope et al. [8] describe the importance of security requirements in BSN- 
based popular healthcare application. The authors proposed a protected IoT-based 
healthcare application using the authentication protocol and BSN, which helps in min- 
imizing various existing security problems. BSN model includes two types of sensor 
networks (SNs): first is on-body SN, which provides a connection between wearable 
devices [19] and a coordinator; second is in-body SN, which provides a connection be- 
tween implanted devices and the base station. Authentication protocol also includes 
two phases: first is the registration phase, where safety credentials are provided to the 
system through a secure channel; second is the anonymous authentication phase, 
where data transmission takes place. 

Rahmani et al. [17] studied fog computing and its usage in IoT-based applica- 
tion. Smart gateway application offers several services at the network edge like 
processing, storing, compressing, standardizing and notifying. Fog computing 
forms an intermediary layer between sensor nodes and cloud for executing several 
services at the network edge. In processing service, a huge volume of sensitive data 
is controlled continuously in less time and response gets generated appropriately in 
different states. In filtering service, sensors receive multiple types of data to execute 
a proper processing algorithm at the network edge. In compression service, trans- 
mission latency and power consumption get reduced throughout the performance. 
Depending on the application requirement compression service is applied. In the 
fusion service, amount of data reduced by enabling the system efficiently. In analy- 
sis service, utilizing local data analysis at the endpoints increases the sensitivity of 
the application. It helps the system to recognize the emergency circumstances. In 
the local storage service, it ensures that the system can easily retrieve the data. An 
entry point should store the incoming data in nonvolatile memory of local storage. 

Alelaiwi et al. [18] proposed smart services for the elderly and physically im- 
paired individuals. The smart home system is designed and developed using 
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technologies like 5G netvvork, cloud intelligence, BSN and vvearable computing. 
This system is helped to provide an advantage over cost reduction, patient care re- 
motely. Authors provided a solution to overcome some technical difficulties related 
to the smart home system. This system utilizes distributed computing and 1oT 
framevvork to gather real-time data of environmental state from home for a secure 
living of patients. Systems generate the health report and broadcast alert message 
to family members and doctors. BSNs gather information regarding body tempera- 
ture, electrocardiograph (ECG) and BP. The collected data vvas forvvarded using 
Bluetooth technology to the cell phone and afterward, the same data was trans- 
ferred through the Internet to a cloud server. Cloud server uses the central process- 
ing unit, a memory unit, a transmission unit, a graphical processing unit and 
different data mining algorithms. 

Baktir et al. [14] proposed cloud computing (CC) and communication design for 
end-user devices. The active designed administration demonstrates all arrange- 
ments connected inside this system that completes an idea for programmable sys- 
tems as software defined networking (SDN). To demonstrate the idea designed by 
the authors, they implemented a fall risk evaluation service. An experimental evalu- 
ation was carried out for accurate detection and performance-designed framework. 
The final output represents that the designed framework can be modified in real 
time and provides advantages over conventional methods. Mahmoud et al. [15] in- 
troduced CoT (cloud of things) models and the execution of model with human 
services also defined. Authors resolve missing institutionalization-related issues by 
model. Enhancement in quality of service and execution is needed for improving 
the productivity of the system. CoT is the combination of CC and the Internet. 
Table 7.1 illustrates the wireless communication standard protocol used in BSN. 

Buston et al. [20] studied about the volume of tissues activated in different pa- 
tients. They found out intersection between the activated volume of tissues and 
anatomical structures and compared the results with the actual clinical outputs. 
The system consists of three models. First is a 3D anatomical model that is derived 
from magnetic resonance imaging (MRI). Second is a finite element model (FEM), 
and third is volume of tissue activated (VTA) prediction deriving model. This ap- 
proach is used to monitor subthalamic nucleus DBS in the patients suffering from 
PD. Here the postoperative MRI report is used to find out electrode location. 
Intensity values near to electrode are compared with slightly lower values of inten- 
sities. The first step is to correlate the MRI image and brain atlas wrapping. This is 
done using software tool from Surgical Navigation Technologies. The second step is 
to create biometric field model where variable resolution meshing algorithm is used 
to minimize the number of nodes and increase accuracy of the result. The third step 
is VTA prediction that is done using voltage solution of FEM. Clinical evaluation of 
patient is done followed by data analysis. The authors performed various clinical 
experiments held around 1-year post-medical procedure. Information is accounted 
for the left DBS anode. The patient’s health was evaluated using two clinical 
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methods. Each analysis was conducted in the morning when the patient is in the 
vaccination state. During the first trials, the following conditions are required to pro- 
duce monopolar stimulation: 2 Hz of frequency, 60 us of pulse width and 0 to -10 V 
of the reference voltage with 20 s of the time interval. During the second trials, refer- 
ence voltage differs from 0 to -4.5 V with 130 Hz of frequency, 60 Hs of pulse width 
needed to produce monopolar stimulation. 


7.3 Methodology of existing systems 


Monti et al. [5] proposed a wireless connectivity provided by DBS for stimulating 
pulse. Implantable therapeutic devices perform an important function for treating 
diseases, for example, cardiovascular disease, neurological dysfunctions and in- 
tense type of diabetes. Wireless technologies [21] deliver an essential function to en- 
hance the execution of these devices. 

The wireless connection comprises two magnetically coupled resonators, that 
is, external resonator and implanted resonator illustrated in Figure 7.2. Both resona- 
tors possess a thickness of 1.18 mm and a frequency of 403 MHz. An external reso- 
nator occupies an area of 1.986 x 1.986 cm from the skin surface. An implanted 
resonator occupies an area of 1.594 x 1.594 cm that working at a profundity of 
0.5 cm beneath a 0.2 cm layer of skin, a 0.2 cm-layer of fat and a 0.1 cm layer of 
muscle. The rate at which energy is consumed by the human body due to interac- 
tion with electromagnetic radiations is defined as specific absorption rate. It also 
defines the power dissipation rate per unit mass of tissue. Scattering parameters of 
a wireless connection were determined by methods of full wave stimulation. 


Muscle region 


Figure 7.2: Geometry of external and implantable resonator. 
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DBS therapy is facilitated by numerous communicating elements. An implanted 
pulse generator (IPG) that is precisely put under the skin close to the collarbone 
produces the electrical oscillations. These oscillations transmitted within a lead to 
the brain. The user interface is used for the doctor and the patients to impart the 
best possible settings to the PG and determine the real-time status. The authors de- 
fine specification of stimulation parameters properly in the study [6]. IPG produces 
10 V of amplitude, few milliamperes of current, 100-250 Hz of frequency and pulse 
width up to 60-120 Hs. A disease-specific stimulation target is characterized before 
the operation. With mathematical modeling, the preferred target must be prepared 
from medicinal pictures of the patient’s brain. This can be performed by utilizing 
programming or physically. 

Special conjectures must be made to measure neuron activation. In the stationary 
stimulation state, the thresholding of activation function and electric field are ob- 
tained. The threshold rate relies upon a few variables, that is, neuron thickness, neu- 
ron connectivity, pulse width and pulse polarity. Average thresholds utilized in the 
method are 20 mV for the activation function and 150-200 V/m for the electric field. 

Authors developed the system using an open-loop and closed-loop model is de- 
picted in Figure 7.3. In the open-loop stimulation, using the trial-and-error mecha- 
nism doctors physically adjust stimulus parameters. In the closed-loop stimulation, 
local field potential (LFP) desynchronization and impedance control approaches 
are reviewed. Computation of LFP in the region of the lead and evaluation of signal 
power in the beta-band is accomplished by LFP desynchronization method. The 
drawback of the LFP method is that this approach lacks additional functionality 
and power. Impedance measurements utilized in the evaluation of the electric prop- 
erties of the lead—brain tissue interface. 

As per the architecture of SDBS [7] designed by the authors, the intelligent 
anode can send important information to the outer controller through the secure 
wireless remote connection and the cathode. In this case, RFID (radiofrequency 
identification) is used as outer controller. The precise study explains system design 
methodology and its uprightness with the current RFID standard. The LTE/Wi-Fi 
connection provided to outer controller work acts as an entry point to/from the 
processing layer. The SDBS prototype configuration has two essential building 
blocks, one is an analog front end and another is digital core. Analog front end in- 
cludes an antenna, network, modulator, demodulator and signals block, whereas 
design core includes implementation of the standard communication protocol, ac- 
tivity capturing and waveform generation methodology. Implementation of the digi- 
tal core was carried out with the help of a well-known hardware module known as 
ARM CortexMO and ATSAMD20E18 microchip. 

Generation of stimulus waveform is based on two techniques: one is the com- 
mands and another is arbitrary sampled information collected from the brain. The 
command-based technique of SDBS is demonstrated in Figure 7.4. The decoder 
translates the command sent by the outer controller and transfers pulse 
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Figure 7.4: Block diagram of the stimulation generation [7]. 
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amplitude, pulse frequency and stimulation duration parameters. Command base 
stores related parameters temporarily for smaller scale handling unit. In SDBS de- 
sign, 8-bit resolution (digital-analog converter) DAC operating with the 1 MHz 
clock frequency and the reference voltage of 2.5 V, electrode uses 3.9 kHz of fre- 
quency to generate a waveform. The extreme value for pulse amplitude and pulse 
frequency is set as 2.5 V and 2.5 kHz, respectively. Neuroactivity recording and 
processing module comprises a CPU, processing unit and (analog-digital con- 
verter) ADC that is designed to record the LFP of the neural activity. Eight-bit ADC 
operating with the reference voltage of 2.56 V is required for converting analog 
signals to digital signals. The intelligent electrode produced a stimulation wave- 
form parameter depicted in Table 7.2. 


Table 7.2: Sinusoidal waveform parameters. 


Parameters Amplitude (mv) Frequency (kHz) No. of cycle 
Test 1 800 2.5 5 
Test 2 800 2.5 10 


Test 3 800 2.5 20 


Heart disease is a major cause of death nowadays. Immediate treatment to a patient 
suffering from heart disease is crucial. However, heart patients call the service 
themselves very late when the condition of disease is irreversible. This happens be- 
cause the patient realizes the problem very late. Therefore, work needs to be done 
early for diagnosis of heart diseases. Internet of things solve this problem poten- 
tially. Patient’s physical status is monitored by the physician continuously irrespec- 
tive of where the patient is and what he is doing and based on the situation the 
physician will decide when to give treatment to the patient. Li et al. [12] have de- 
scribed IoT-based solution for constant monitoring of patients’ physical parameters 
like BP, ECG and SpO,. The authors described system architecture using four differ- 
ent transmission modes based on the medical need and feasibility of communica- 
tion technologies [29]. 

A prototype implementation is done to represent the system data acquisition 
part or sensing layer comprises sensors worn or carried by patients. The sensor de- 
vice is chosen based on parameters to be monitored and the sampling frequency of 
each parameter. Considering medical demands and a practical feasibility- 
monitoring scheme is decided. The sampling frequency of ECG signals is set to 
128 Hz. Sensing of BP, pulse rate and SpO: level is carried out in the interval of 2 
s. Testing of blood fat and blood glucose is conducted before and after a meal. The 
data transmission process is subdivided into two processes. Communication tech- 
nologies required for these two subprocesses are different. 
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Data transmission from the sensor to the connector happens in short dis- 
tance, which requires high bandwidth. Authors chose Bluetooth technology and 
smartphone as a connector for first subprocess. Once connector receives the 
data from the sensor it transfers these data to a remote site through another 
communication technology comprising second subprocess. The range of tech- 
nology is a crucial part of the second subprocess. Cellular wireless technologies 
(GSM, GPRS) and wired technologies (ADSL) are used for the second subprocess. 
The data transmission [30] is performed in four modes: (a) in the first mode, con- 
tinuous transfers of all data to the physician in real time are achieved. This is 
the highest monitoring level used for the patients who are at high risk of relapse 
by heart diseases. (b) In the second mode, a continuous transfer of data in the 
fixed time period is performed. Empirically heart attack takes place from 3 to 4 
pm or within 2 h after waking up. Thus in this mode data transfer is continuously 
done during this period. (c) In the third mode, sampled data is sent to the 
connector using an event-triggered transmission mechanism. At connector, 
analysis of these parameters is performed and if the parameters are beyond the 
normal range it triggers an event. When an event triggered, transmission of data 
from the connector to the physician’s server is carried out experimentally. (d) In 
the fourth mode, the physician’s server receives the sensed parameters from the 
patient’s body whenever they feel uncomfortable. As explained, the four modes 
are not quite the same as one another in the measure of information sent to the 
remote server, the necessity for network quality and the applicability for various 
kinds of patients. 

Authors developed a system using MercuryLive architecture [10], which in- 
corporates programming services running at three levels: a central server, pa- 
tient’s hosts and clinician’s hosts. A central server provides a secure channel for 
data gathering and video forum service. The secure channel includes encrypted 
services, a secure sockets layer, Secure Shell and a virtual private network. In 
this layer, both patients and doctors can have direct access to the web server, 
database, data forwarding service and a video conferencing service. In the pa- 
tient’s host layer, doctors can set an ideal battery life status. As sensor informa- 
tion is being gathered, an information transfer demon keeps running in the 
interface background and then transfer the collected sensor information deftly 
to the central server. In clinician’s host layer, doctors manage information- 
gathering sessions remotely. Doctors get the patient information and address pa- 
tients utilizing the video conferencing administration if necessary. To describe 
MercuryLive architecture, authors surveyed latencies and bandwidth prerequi- 
sites at a various layer of the framework. Latency measurement depended on ei- 
ther timestamp gathered at each host or packet delivery at every MercuryLive 
layer. To guarantee estimation precision, framework clock was synchronized to 
a similar Network Time Protocol. 
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7.4 Components required for deep brain monitoring 


This section describes the general components for brain monitoring e-healthcare 
system, which consists of implantable components and external components [6, 7]. 
There are three types of implantable components, namely, a lead, PG and an exten- 
sion. Main external components for brain monitoring system are desktop applica- 
tion (DA), mobile application (MA) and wireless charger (WC). General architecture 
of PG for deep brain monitoring is shown in Figure 7.5. Description of each of the 
components is as follows. 


Sb 
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Figure 7.5: Architecture of pulse generator (PG) for deep brain monitoring. 


7.4.1 Implantable components 


Electrode leads: The leads consist of four electrodes that provide stimulation pa- 
rameters to a certain region of the brain [6]. These stimulation parameters are gen- 
erated by PG. The leads are stereotactically introduced into the affected region of 
the brain as depicted in Figure 7.6. 

Extension: The extension is a combination of wires. Electrode leads are at- 
tached with PG through an extension cable that provides an electrical path. The ex- 
tension cable is embedded inside the scalp area, where it connects leads with an 
implantable device. 
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Figure 7.6: Placement of implantable components inside the human body. 


PG: The PG is the heart of the DBS. Its main function is to generate stimulus pa- 
rameters from an external software application over a wireless communication inter- 
face. It works from a rechargeable battery with a wireless charging interface. PG 
consists of the following parts: (a) stimulus generator, (b) rechargeable battery, (c) 
wireless charging interface, (d) wireless communication interface [31, 32] and (e) mi- 
crocontroller for overall control and monitoring of the device [5, 6]. Specifications of 
PG are have programmable pulse parameters in the following ranges: (a) Pulse 
Amplitude — 0 to 5 V (voltage mode) adjustable in steps of 0.1 V and 0-20 mA (cur- 
rent mode) adjustable in steps of 0.1 mA, (b) pulse frequency — 200 Hz range approxi- 
mately, (c) pulse width — 30-400 us, adjustable in steps of 10 us, electrode 
configuration — two leads for two brain hemispheres and four electrodes per lead. 
Pulse parameters are depicted in Figure 7.7. 

Generation of waveform carried out using timer/counter function facilitated by 
the microcontroller. The timer in UP/DOWN mode is used for an electrode to gener- 
ate pulse signals. Generation of waveform controlled by DAC with the reference 
voltage of 2.5 V named as (DO). Selection of electrode is controlled by MUX (MO). 
Once the timer started, 500 kHz of frequency is required to generate each pulse that 
takes around 1 Hs of the period. Timer consists of register, that is, A1 to A6 and B1 to 
B6 to store obtained values as represented in Figure 7.8. 
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Figure 7.8: Pulse waveform generation by an electrode. 
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7.4.2 External components 


DA: The DA is designed for use by a clinician, doctors and expertise to verify param- 
eters settings. Using this software interface doctors can monitor the state of pa- 
tients. This is designed to provide appropriate wireless interface for communicating 
with the implanted device. 

Mobile application (MA): The mobile-based application communicates with PG 
via Bluetooth technology. Functionalities of this module are as follows: (a) patient 
or caregiver can control therapy state, (b) the user can check the status of the im- 
planted battery and (c) allow the user to adjust the setting of pulse amplitude, 
pulse width and pulse rate within the clinician-prescribed limits. 

WC: A wireless battery charger is used to charge the implanted device. 
Rechargeable frequency and time for WC is 1 day and less than 5 h, respectively. 
Algorithm 1 illustrates the DBS using MCU (microcontroller unit) system implemen- 
tation initiating via software interface. 

The advantage of the deep brain monitoring system is to enhance motor func- 
tion, improve personal satisfaction and diminish medicine for patients. Treatment 
can enable patients to have an increasingly ordinary and autonomous way of life. It 
also helps in improving medicate-related confusions. 


Algorithm 1: DBM using MCU system implementation. 


Input: Clinician / Patient input parameter (Login details, Stimulus parameter setting) 
Output: Actions (Therapy Program — START/STOP, Pulse Generator — Activate/Deactivate, External 
Components - Active/ Non-Active, Battery State — ON/OFF) 

Begin: DBM using MCU 

Connect PG to external component using wireless communication protocol. 

Case 1: START / STOP the therapy session 

If Patient health status is abnormal then 

START therapy program session //via MA 

Else If Patient health status is normal then 

STOP therapy program session //via MA 

End If 

End If 

Case 2: Continuously monitor health of patient using software interface. //via MA and DA 
Case 3: Wireless charging 

If Battery State == Low then 

ON Battery Charging process using wireless charger 

Else if Battery State == Full then 

OFF Battery Charging process 

End if 

End; 
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7.5 Observation 


This section describes the general comparison betvveen various existing applica- 
tions using Table 7.3. 


7.6 Conclusion 


This study introduces the architecture and concept of deep brain monitoring and 
controlling using implantable sensors. IoE-based e-healthcare survey helps to de- 
liver a unique medication approach to PD patients from India. The fundamental 
functions of the deep brain monitoring include patient activity monitoring, wave- 
form generation using PG, therapy status checking, body movement controlling, in- 
formation gathering, data forwarding, data analysis and many more. The existing 
application is developed to treat patients suffering from neurological disorder and 
research carried out by various researchers. These systems describe different meth- 
odologies used for healthcare applications that provide great practical significance 
approach in the treatment of PD patients. The research represents functionalities of 
the electrode and the stimulation pulse parameters in such a way that the DBS sys- 
tem is able to provide an adequate amount of stimulation without causing any 
harmful side effects to the tissue or patients body. 
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Avinash S. Devare and G. Krishna Mohan 
8 Enhancement path assured transfer 
protocol to transmit urgent data 


Abstract: Sensor netvvork is designed to provide monitoring services especially for 
natural disaster. These natural disasters may affect lives of human beings directly or 
indirectly. Congestion is a very important factor in wireless sensor network (WSN) 
and also it reduces quality of services. Different types of data are generated in WSN 
and sensor nodes also depend on meant factors. It is very important to control the 
congestion as it may cause loss of packets or even more utilization of energy by sen- 
sor nodes. Congestion can be reduced by increasing the number of resources, reduc- 
ing the transfer from source node or prioritizing the data that has to be sent. The data 
is categorized into two types, urgent data and normal data. Urgent data or sensitive 
data should be given more priority than the normal data. The proposed system 
checks for urgent data and give priority to urgent data, and by this the sensitive data 
will reach destination in time. In many previous systems, normal data was discarded. 
In the proposed system, normal data will not be discarded but it will be sent by some 
other alternative path to the sink node. The result shows better performance. 


Keywords: wireless sensor network, urgent data, enhancement path assured trans- 
fer protocol, normal data, sink node 


8.1 Introduction 


Wireless sensor networks (WSN) acquired more attention just because of its varied 
and attractive applications in numerous fields. WSNs are the wireless networks 
and having remotely distributed sensors to coordinately observe, monitor and 
store the environmental conditions or any required information. There are many 
applications related to WSNs and also it is an integral part of day-to-day life. 
Monitoring applications depend on WSNs. They are used to monitor pressure, 
sound, temperature and so on. The applications include target tracking [1], online 
anomaly detection [2], biometrics and health care [3], wireless body sensor net- 
works in medical applications [4], object tracking [5] and many other useful appli- 
cations. A WSN consists of huge quantity of sensor nodes and these preprocess 
the raw data by some easy computations and transmit the essential preprocessed 
data. A sensor is used to sense, computate and communicate, and it is equipped 
with a small battery. There are some characteristics of sensor like small size, light- 
weight and portability that makes WSN as best choice among various applica- 
tions. The WSN is an advanced technology that helps the society to be more safe, 
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comfy and secure. WSN as a social infrastructure is capable to transfer critical 
data very quickly and is more reliable than some other data. WSNs of this type 
would generally transmit both urgent and normal data. This data should be han- 
dled differently as priority of data will be different. The system transmits impor- 
tant data with lower delay and higher reliability related security, environment, 
disaster or condition monitoring applications. So we can say that WSN is able to 
categorize critical and noncritical data and give priority to packets based on its 
importance and urgency depending on the request that comes from the applica- 
tion layer. The objective of this idea is to get awareness of quality-enabled net- 
works for environmental observation and monitoring mainly for calamity 
avoidance and urgent reply situations. 

The real-time communication is one of the challenging problems in WSN. 
Sensor nodes can transmit very limited, irreversible and power sources because of 
their ad hoc strategy of deployment and low cost. Thus, a standout among the 
many constraints is to decrease the energy consumption as less as possible of sen- 
sor network. The different WSN applications such as border surveillance must be 
able to operate for quite a long time without any wired power providers. Along 
these lines, specifically, the delay requirements of packets must be met at very less 
energy value in WSN. 

WSNs can interact with their environment through different sensors, process 
the data in sensor node itself as it has simple computation capability, and commu- 
nicate processed data with all their neighbors. Following components are included 
in the sensor node: 

- Wireless modules are the main constituents of WSN. They have the communica- 
tion abilities and the memory for programming the application code. A module 
contains a transceiver, microcontroller, power source, few sensors and pro- 
grammable memory unit. 

— A sensor board that is attached on the wireless module is embedded with many 
types of sensors. Sensor board contains a prototyping area. 

- Programming boards provide many interfaces that connect wireless modules to 
an enterprise or any PC/laptop or industrial network. The programming boards 
are used either to program the wireless modules or gather data from wireless 
modules [6]. 


There are different types of sensor nodes based on application in which it is used. 
They have different storage memory size, speeds, transmission rate and operating 
frequency. 

The data packets can be transferred from one node to another by using different 
transmitting paths that may utilize different times to reach. Many different and al- 
ternative paths will be available at different times. Hence, we need the device or 
protocols that will send data packets in comparatively less time. This path that uses 
minimum time is called the best path among all available paths. These protocols 
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are the routing protocols. The disadvantage of these routing protocols is that they 
ignore the power levels of the nodes in the available minimum time path. By this, 
nodes may end up sending noncritical or nonurgent data packets repeatedly using 
all the power of these nodes. Therefore, these nodes will run out of power and come 
out of WSN. Later data packets need to transmit from different available nodes that 
may use more time. By this, the critical data may not reach on time to its destina- 
tion and incur huge loss. It is required to deal with these problems. Normal data 
and urgent data should be categorized and transmit by different paths. Urgent data 
only should be transmitted using best path. We proposed an algorithm that will cat- 
egorize the urgent data from normal data by checking the priority. And then dedi- 
cate the best path to the urgent data transmission. Normal data will be transmitted 
using the alternative paths. 


8.1.1 Characteristics in transport protocol design 


Characteristics of transport layer protocol are as follows: 

- Connection oriented: The Sender and receiver establish the connection before 
the data transmission begins. When the sender sends the data, it gets the posi- 
tive/negative per packet response or selective ACK/NACK response from its 
recipient. 

- Same order delivery: When the sender divides the packets into number of frag- 
ments by assigning the sequence number to each for transmission, then trans- 
port layer protocol transfers packets sequentially to the receiver in the same 
order as they were at the source node in order to reconstruct it again. 

- Reliable data: If all the packets reach the base station (BS) successfully in the 
same order, then the BS send the selective acknowledgment to sender; other- 
wise, BS sends the negative acknowledgment to increase the reliability. 

- Flow control: If the flow rate of sensor nodes is huge prominent than that of 
processing rate of receiver node, then congestion happens around the receiver 
node. To minimize the congestion, the flow rate of sender has to be controlled. 

- Congestion detection and avoidance: Network congestion is detected by 
checking the buffer level and load on channel. At the node level, congestion 
can be avoided by setting the threshold value to buffer. When it increased 
more than the threshold of buffer, it sends backpressure message to sender 
to decrease flow rate in order to solve the congestion. Second issue is: Load 
on channel; if downstream node does not receive the packet within the pre- 
defined time, then it assumes that the congestion occurred in the network 
due to large delay. Solution to this problem is also the same, that is, to adjust 
the reporting rate of sender, so that the receiver can handle and process the 
packets. 
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Loss recovery: It is a very sensitive issue for some applications such as military 
surveillance and many more. Some application may tolerate the loss of packets 
such as temperature monitoring. Many researchers have contributed their ef- 
forts to achieve the loss recovery with minimum energy expenditure. The cache 
and noncache techniques allow the transport layer protocol to achieve the loss 
recovery. Also, the retransmission mechanism is helpful to recover the lost 
packets by checking the packet numbers. 


8.1.2 Issues in transport protocol design 


Issues in transport protocol (TP) design are discussed below. 


Congestion control: Perform reliable delivery and congestion control of data. 
As large amount of data is transferred from the source node to master node, the 
congestion may occur around the master node. In spite of the fact that MAC 
convention can get back the lost packets because of bit error, there is no chance 
of taking care of packet loss because of buffer exceeding its limit. WSNs require 
a component for packet loss recovery, for example, acknowledgment and spe- 
cific acknowledgment utilized in TCP. Moreover, in VVSNs reliable delivery may 
have a different importance in comparison to the long-established networks; 
accurate transfer has to be ensured. Some sensor applications just need to get 
data appropriately from a few nodes around the region. It is not important to 
get data from all nodes in the respective region. This perception may cause 
a vital contribution in the plan of WSNTP. Likewise, it might progressively be 
powerful to utilize a level-by-level approach that can control overcrowding and 
diminish loss of packets, and along these lines it conserves energy. The level- 
by-level system may likewise bring down buffer necessity at intermediate 
nodes. 

Quality of service (QoS): WSNs sending data protocol ought to make the un- 
derlying connection establishment method simpler or go through connection- 
less protocol to improve the process speed, reduce the transmission delay and 
enhance throughput. Many applications of WSNs are reactive, so it implies that 
they monitor passively and trust that occasions will happen before transferring 
the data to the master node. These types of applications can have several pack- 
ets to transfer as the outcome of an event. 

Packet dropping rate: In order to avoid energy waste, TP in WSNs ought to 
avoid the packet losses, however, much as could be expected. To avoid this, 
TP utilizes active congestion control (ACC) to bring down the connection use 
by some margin. ACC triggers congestion evasion before congestion really 
happens. For instance, of ACC, intermediate or sender nodes decrease its 
transfer rate as buffer size of neighboring nodes surpasses up to specific 
limit. 
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- Throughput: The TCP is supposed to ensure fairness for various nodes all 
together as every node can accomplish reasonable throughput. 

- Cross-layer optimization: If feasible, TP ought to be structured with this 
optimization. For instance, if a routing method tells the TP about failure of 
route, then the protocol ought to have the capacity to derive that loss in data 
or packet is from path failure and not because of overcrowding in network. 
In such a scenario, the sender may continue with its current rate. 


Issues of WSN are coverage ability, need of specialized hardware, QoS, security, 
congestion in network, network connectivity, prolong the network survival time, 
network expansibility support, algorithm complexity and others [7, 8]. 

This chapter deals with congestion control in network. The data transmitted 
can be urgent data or normal data. Urgent data has to be transmitted by giving it 
the most priority. There are many different protocols that are made only for urgent 
data transfer. The existing systems mainly focus on urgent data transfer and dis- 
card other information. The proposed enhanced path assured transfer (e-PAT) sys- 
tem transmits both urgent and normal data but more priority will be given to the 
urgent data, and the dedicated path will be assigned for transmission of urgent 
data [9]. 


8.1.3 Constraints of WSN 


Despite the fact that a large number of protocols have been useful to wireless or 
wired network, these protocols cannot be utilized to sensor network as they hold 
unique characteristics that recognize it from different kinds of wireless or wired net- 
works. The attributes are as follows: 

- The sensor nodes equipped with short-range radio communication are prone to 
high latency, high failure rate and limited bandwidth. 

— Sensors range of transmission is short and mostly impacted by transmission 
power. 

- The sensors are normally equipped with batteries and are supposed to operate 
unattended for longer time. Therefore, energy consumption is the essential re- 
quirement. A sensor acquires more energy on communication rather than 
computation. 

- Sensors have restricted computational ability and have less memory. This re- 
stricts the different algorithms and results in processing of a sensor. 

- The communication is affected by obstacle or noise. 

- There are large numbers of sensor nodes, so they do not contain global ID. 

— Due to movement or including more number or failure of sensor nodes changes 
the WSN topology. 
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8.1.A Path-assured protocol for WSN to transfer urgent data 


This protocol consists of the following steps: 

i) For blocking normal data transfer, the urgent data node starts blocking request 
to all other nodes. Blocking of data transfer is a help to clear the path. 

ii) Here critical or urgent data is transmitted directly to the sink node, and the 
sink node will give ACK for the received message, then actual data transmission 
takes place and when it is done the sink node sends the release message for 
releasing the node. Here data transmission takes place without collision be- 
cause direct path is generated from source to sink and also by doing so it de- 
creases delay because of retransmission, packet drop. 

iii) This technique increases the network lifetime and reduces network overload by 
simulation 


8.1.5 To develop a PDNC method with security for WSN 


Selective packet discarding technique is also used in the proposed system. These 

techniques help congestion control by removing unwanted packets from communi- 

cation. We also use Remote Control Protocol (RCP) protocol for congestion control 

in wireless networking. RCP-CA helps to control the traffic by 

i) Quality control: Establish a target flow rate, such as Control Packet Rate (CPR). 

ii) Acceleration control: it limits the acceleration. 

iii) Feedback control: main aim of this is to decrease packet loss occurred during 
transfer. 


Advantages of planned system controlling congestion from WSN using RCP proto- 
col: It increases energy efficiency for discarding congestion control and the results 
are compared with the PAT and e-PAT based on the performance metrics like en- 
ergy consumption, packet delivery ratio, delay and packet drop. 


8.1.6 A proposed system to transfer urgent and normal data 
e-PAT method 


Here a number of protocols are designed for data transmission (urgent). In the PAT 
protocol, the node first asks for urgent data transmission to destination. In that 
case, the sensor node also stops transfer of normal data so that it sends a blocking 
request. This will block the transmission of normal data and clear the path; hence, 
it transmits urgent data very fast and don’t have to wait for data transmission also 
there is no any fear of collision and packet loss and also avoid congestion in 
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network and provide 100% reliability for urgent data so here normal packets are 
blocked and not sanded in network and which is not stored at node because of 
memory shortage. So this is a major issue resolved in the proposed system by using 
intelligence. The proposed system is compared with the Packet Discarding Node 
Clustering (PDNC), and PAT depends on its performance metrics like energy con- 
sumption, packet drop ratio, delay and packet delivery ratio. Hence, the proposed 
technique increases the data protection and decreases latency. 

The chapter is organized as follows. A brief literature survey on existing sys- 
tems is given in Section 8.2. System flow and working of system is explained packet 
discarding node clustering in Section 8.3. In Section 8.4, results are discussed. 
Section 8.5 concludes. 


8.2 Literature survey 


Alipio and Tiglao [9] proposed a cache-aware congestion control protocol. They de- 
signed a protocol with a mechanism, which is mainly based on management of 
cache rules that increase cache consumption. They conducted simulations, and de- 
rived method to evaluate the efficiency with occurrence of loss of packets in WSN. 

Tao and Yu [10] proposed an enhanced congestion recognition and prevention 
system. This system is an energy-efficient control system for WSN. For recognition 
of congestion it measures congestion that uses weighted buffer difference and dual 
buffer thresholds. Queue scheduler is used to select next packet that has to be sent. 
Whenever congestion is caused the packets are selected based on channel loading 
and packets urgency. 

In WSNs, the capacitor is used to store harvested energy. These capacitors dis- 
charge over time or discharge when there is data transmission. To transmit data 
only this harvested energy can be used and harvesting of energy requires more 
time. Hence, using this mode, transmission of urgent data to sink node is impossi- 
ble [12]. The hybrid access point exuded energy to users and the received informa- 
tion is transmitted to sink node by using harvested energy by users [13]. By using 
backscatter communication system, the users receive sudden excitation energy ra- 
diated by the hybrid access point. 

Sridevi et al. [14] projected a model based on various traffic in WSN of many 
different paths. This protocol assigns bandwidth that is directly proportional to 
number of applications running in sensor nodes at the same time. The dataflow will 
be forwarded to multiple paths towards destination node. 

Wan et al. [16] proposed PSFQ. It is a trustworthy communication from master 
node to sensor nodes. Pump Slowly Fetch Quickly (PSFQ) is intended to be energy 
efficient and scalable, attempting to limit the quantity of signaling messages and 
depending on various local timers. It expects to share out data from the master 
node to other sensor hubs by pacing information at a generally moderate rate, yet 
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permitting hubs that encounter loss in data to bring any lost segments from prompt 

neighbors forcefully. It consists of three operations: pump, report and fetch. It is- 

sues Negative ACK in turn around way to recovering lost fragments. Master node 
can make sensor hubs to input information conveyance status to it through a basic 
level-by-level report operation. 

Few disadvantages of PSFQ are as follows: 

1) It cannot distinguish the single packet loss. 

2) It utilizes statically and gradually pumps the outcome in huge wait. 

3) Level-by-level recuperation with cache will increasing buffer. To lessen the im- 
pacts among these packets, the nodes utilize random delays before replying. At 
last, to check data delivery status information, the report activity/operation is 
started by the source. 


Wan et al. [16] studied the CODA protocol, which is related to upstream congestion 
control. It explained energy-efficient congestion control plot with three plans, that is, 
i) Open-loop level-by-level backpressure 

ii) Congestion detection 

iii) Source-to-destination multisource rule 


Congestion Detection and Avoidance (CODA) endeavors to distinguish overcrowding 
by checking the present buffer use and remote channel load. The node identifying 
overcrowding will tell its next neighboring node about decreasing the transfer speed. 
The next neighboring hubs will generate to reduce yield speed as that of Additive 
Increase/Multiplicative Decrease (AIMD). At last, CODA manages multisource rate 
with the use of closed-loop end-to-end approach as pursued, and as a sensor rate 
overwhelms the hypothetical throughput, it will set “regulation” bit in even packets. 
In occurrence the occasion packet obtained by destination has a “regulation” bit. An 
ACK control note is send by the sink nodes to sensors for informing them to increase 
their data transfer speed. If overcrowding is reduced, the destination node will effec- 
tively mail ACK control note to sensor nodes and to illuminate them to expand their 
speed. To regulate sensors rate CODA utilizes the mode similar to AIMD in TCP. 
It has some disadvantages: 
1) Result in decreased reliability, particularly in situations with inadequate source 
and more data speed 
2) Response/delay time required will be expanded under substantial overcrowding 


Dipti Patil et al. [17] described the PCCPprotocol. It gives congestion control in up- 
stream and fairness. PCCP figures a congestion degree with a solitary measure that 
is proportional to mean packet arrival time to the mean packet service time. PCCP 
utilizes implicit overcrowding warning by piggybacking blockage data in header of 
information parcels. In this manner, maintaining a strategic distance from extra 
control bundles of Priority-based congestion control protocol (PCCP) utilizes 
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a bounce by jump rate modification plot called need-based rate alteration, and the 
three utilizations needs identified with hub need file to arrange traffic are source 
traffic need, travel traffic need and worldwide need. In any case, in PCCP, the need 
is characterized from a hub perspective rather than the traffic stream perspective. 
Along these lines, the traffic streams from a hub can’t be separated. 


8.3 Proposed system 


The e-PAT protocol is proposed. This protocol transmits both normal and urgent 
data. In this, the path is dedicated if urgent information is detected and transferred 
through dedicated path. At the same time, if normal data has to be transmitted then 
it will be transmitted through alternate path toward sink node. Obviously, priority 
will be given to urgent data but normal data will not be discarded. Figure 8.1 shows 
the system flow diagram of e-PAT. First, data will be checked whether it is urgent 
data. This is checked by the eflag bit in the end device table. If it is an urgent data, 
then first send a broadcast message to all neighboring nodes and allocate 
a dedicated path for transfer of that urgent data to the destination node and transfer 
the data. If it is not an urgent data then it will be the normal data and continue 
sending normal one. In between if normal data gets detected, then send this data 
through nodes that are not in the dedicated path. Once urgent data transmission 
gets over, transmit normal data to the next hop level and then to the sink node. 


8.3.1 Proposed system flow diagram 


In WSN, urgent data transfer is considered to be very important. The proposed sys- 
tem is e-PAT protocol. There are three steps when end nodes detect the urgent data. 
1. It broadcast urgent data detection message to all other neighboring nodes. 

2. Once urgent data detection message is received, these nodes stop transmitting 
normal data and give priority to urgent data and dedicate the specific path to 
urgent data. 

3. The normal data will then be transmitted by using alternate path nodes that are not 
in the dedicated path for urgent data transmission. Hence, urgent data and normal 
data will be transmitted by different paths to the next hop toward sink node. 

4. As soon as urgent data transmission completes, sink node will be free to accept 
normal data. 


This increases performance of the system. 

Some procedure is required to check whether the data is urgent or normal. The 
system will not know about the type of data it is receiving. It is required to tell the 
system which one is urgent data. For that, there is one end device table. In this 
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Figure 8.1: Proposed system flow diagram. 
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table, 1 bit is eflag bit, that is, emergency flag, and this bit gives the information 
about urgent data. 


8.3.2 Enhanced path assured transfer algorithm 


e-PAT algorithm is given below. Data or information from different sensor nodes is 
input for this algorithm. The output is based on the priority of data, that is, whether 
data to be transmitted is normal or urgent. At the sink node, all data will be re- 
ceived. Priority of urgent or sensitive data is more than that of normal data. Based 
on priority, data will be received by the destination node. 


Algorithm: Enhanced Path Assured Transfer 

Input: Data from Sensor network. 

Output: Data received by sink node based on priority (urgent or normal data). The 
priority of urgent data is more than normal data. 


{ 
1. If data is urgent data then 

Send block broadcast message to all neighboring nodes. 
Else 

Continue sending normal data 
2. Create selected path tree for urgent data transmission. 
3. If normal data detected then 

Send this normal data through nodes which are not in selected path tree. 

Else 

Stop 
4. If urgent data transmission complete than 

Transmit normal data 
Else go to step 2 
} 


8.3.3 Mathematical model enhanced path assured transfer 


algorithm 
Let S be the system. 
S = {Di,Do,F} 
Where 


I/P-Di={d1,d2,d3..dn} 
Where d1 is data from s1 
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d2 is data from s2 
dn is data from sn 
where 1s1,s2,.. ...sn) are sensor nodes 
O/P-Do={du,dn} 
Where du is data (urgent) received by sink node 
dn is data (normal) received by sink node 
F={PDR,PLR,AD,T} 
PDR=packet delivery rate-Ypacket received/ time 
PLR=packet loss rate=Ysent packet- received packet/ time 
AD=Average delay =>(packet received time-packet sent time)/n 
T-Throughput-ypacket delivered/ packet received 


8.4 Results and analysis 


The accompanying measurements are considered during analysis of e-PAT protocol 

performance. 

- Transmission delay: This delay is estimated as an interim between transmis- 
sions of data packet from its sensor nodes to the destination of data packet at 
the destination node: 

Average delay = (packet received time - packet sent time)/n 

- Packet delivery ratio: It is proportion of packets received at master hub to the 
number of packet transmitted. Packet delivery ratio is determined as that of in- 
dividual sensor node and that of overall network. 

- Throughput: Throughput = Ypacket delivered/packet received 


Simulation parameter 


An e-PAT is implemented in an NS2 simulator environment and a wide-ranging sim- 
ulation experiment is conducted. In simulation experiments, different sensor hubs 
are consistently distributed in 500 m x 500 m two-dimensional area with a sink 
node at the lower point. We occupy a general broadcast-based and unicast-based 
routing protocol for network layer. In these routing protocols, it is thought that 
each node knows its distance from the sink node. 

To evaluate e-PAT, PDNC and PAT performance, the parameters are measured 
in two scenarios: 
1. Urgent data transfer 
2. Normal data transfer 


Main attributes used in checking of e-PAT, PDNC and PAT system are interval, node 
and packet size. 
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8.4.1 Interval 


Figure 8.2(a) gives comparison of PDNC, PAT and proposed e-PAT system based on 
its interval and packet delivery ratio. Red line denotes less packet delivery ratio as 
distinguished by the black line. Red line is for PDNC protocol and black line indi- 
cates the PAT protocol. And blue line for e-PAT system in that packet dropped is 
very high when compared with others. 


Figure 8.2: A comparative study of PDNC, PAT and e-PAT: (a) interval versus packet delivery 
ratio and. 


Figure 8.2: (b) interval versus packet dropped. 
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Figure 8.2(b) gives a comparison of PDNC, PAT and the proposed e-PAT system 
based on interval and packet drop ratio. Red line denotes less packet delivery ratio 
as distinguished by a black streak. Red line is for PDNC protocol and black line in- 
dicates the PAT protocol, And blue line for e-PAT system in that packet dropped is 
very less (Table 8.1). 


Table 8.1: Comparison of PDNC, PAT and e-PAT (packet delivery ratio vs interval). 


Interval PDNC (%) PAT (%) e-PAT (%) 
0.3 40 60 80 
0.4 35 50 60 
0.5 20 40 55 
0.6 17 38 50 
0.7 15 35 48 


0.8 10 33 45 


Figure 8.2(a) provides the interval versus packet delivery ratio in PDNC, PAT and 
proposed e-PAT system. The black line shows more packet delivery ratio when com- 
pared with red line. Black line indicates the PAT protocol and red line indicates the 
PDNC protocol. And blue line for e-PAT system in that packet dropped is very high 
when compared with others. 

Figure 8.2(b) provides the interval versus packet drop ratio in PDNC, PAT and 
the proposed e-PAT system. The black line shows more packet delivery ratios when 
compared to red line. Black line indicates PAT protocol and red line indicates PDNC 
protocol. And blue line for e-PAT system in that packet dropped is very less. 


8.4.2 Node 


Figure 8.3(a) gives a comparison of PDNC, PAT and proposed e-PAT system based 
on node and packet delivery ratio (Table 8.2). PAT protocol is shown in black line 
and PDNC protocol in red line. Red line denotes less packet delivery ratio as distin- 
guished by a black line. And blue line for e-PAT system in that packet dropped is 
very high as compared to the three whenever we consider a different node scenario: 
10, 20, 50,100 nodes. 

Figure 8.3(b) gives a comparison of PDNC, PAT and the proposed e-PAT system 
based on node and packet drop ratio. PAT protocol is shown in black line and 
PDNC protocol in red line. Red line denotes less packet drop ratio as compared to 
black line. And blue line for e-PAT system in that packet dropped is very less as 
compared to three whenever we consider different node scenario: 10, 20, 50,100 
nodes. 
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Table 8.2: Comparison of PDNC, PAT and e-PAT (packet delivery ratio versus node). 


Node PDNC (%) PAT (%) e-PAT (%) 
100 42 65 70 
125 36 50 55 
150 30 45 55 
175 17 42 56 


200 15 35 48 


= rr— — À CEYT 


Figure 8.3: A comparative study of PDNC, PAT and e-PAT: (a) node versus packet delivery ratio and. 


Figure 8.3: (b) node versus packet dropped. 
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8.A.3 Packet size 


Figure 8.4(a) provides the packet size versus packet delivery ratio in PDNC, PAT 
and proposed e-PAT system. PAT protocol is shown in black line and PDNC protocol 
in red line. The red line denotes less packet delivery ratio as compared to black 
line. And blue line for e-PAT system in that packet dropped is very less as compared 
to the three whenever we consider different packet size (Table 8.3). 


Figure 8.4: A comparative study of PDNC, PAT and e-PAT: (a) packet size versus packet delivery 
ratio and. 


Figure 8.4: (b) packet size versus packet dropped. 
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Table 8.3: Comparison of PDNC, PAT and e-PAT (packet delivery ratio vs packet size). 


Packet PDNC (%) PAT (%) e-PAT (%) 


size 

30 42 65 68 
sə 38 55 58 
40 36 42 45 
45 20 37 39 
50 18 35 38 


55 15 34 35 


Figure 8.4(b) provides the node versus packet drop ratio in PDNC, PAT and pro- 
posed e-PAT system. PAT protocol is shown in black line and PDNC protocol in red 
line. The red line denotes less packet drop ratio as compared to black line. And 
blue line for e-PAT system in that packet dropped is very high as compared to the 
three whenever we consider different packet sizes. 


8.5 Conclusion 


Data is categorized into two types, urgent data and normal data, which will be sent 
to the sink node. Urgent data or sensitive data should be given more priority than 
the normal data. In this system, the system checks for urgent data and gives priority 
to urgent data; by this the sensitive data will reach destination in time. In many 
previous systems, normal data was discarded. In this proposed enhanced path as- 
sured system, normal data will not be discarded but it will be sent by some other 
alternative path to sink node, or normal data will be sent once the congestion is 
reduced. Both normal and urgent data will reach the sink node, and more priority is 
given to urgent data; hence, it reaches first. The result shows better performance 
and throughput. 
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